Xstream Project XStream

Name: Xstream Project XStream
Brand: Xstream Project

productRU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

8critical11high1medium0low

updated 2026-10-27

vulnerabilities (21)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2021-39144US	high8.5OT critical	98.1% (100th)	KEV	no fix	2021-08-23	≤ 1.4.18
CVE-2020-26217US	high8.8	82.7% (100th)	Exploit	no fix	2020-11-16	≤ 1.4.14
CVE-2020-26259US	medium6.8	82.4% (100th)	Exploit	no fix	2020-12-16	≤ 1.4.15
CVE-2020-26258US	high7.7	81.8% (100th)	Exploit	no fix	2020-12-16	≤ 1.4.15
CVE-2021-29505US	high8.8	77.2% (100th)	Exploit	no fix	2021-05-28	≤ 1.4.17
CVE-2021-21345US	critical9.9	72.3% (99th)	Exploit	no fix	2021-03-23	≤ 1.4.16
CVE-2021-21349US	high8.6	46.8% (99th)	Exploit	no fix	2021-03-23	≤ 1.4.16
CVE-2022-41966US	high7.5	9.35% (95th)	Exploit	no fix	2022-12-28	≤ 1.4.20
CVE-2019-10173US	critical9.8	95.0% (100th)	—	no fix	2019-07-23	≤ 1.4.10
CVE-2021-21351US	critical9.1	82.1% (100th)	—	no fix	2021-03-23	≤ 1.4.16
CVE-2021-21346US	critical9.8	76.4% (100th)	—	no fix	2021-03-23	≤ 1.4.16
CVE-2021-21344US	critical9.8	76.0% (100th)	—	no fix	2021-03-23	≤ 1.4.16
CVE-2021-21342US	critical9.1	50.0% (99th)	—	no fix	2021-03-23	≤ 1.4.16
CVE-2022-40152US	high7.5	18.2% (97th)	—	no fix	2022-09-16	≤ 1.4.19
CVE-2021-21350US	critical9.8	15.2% (97th)	—	no fix	2021-03-23	≤ 1.4.16
CVE-2021-21347US	critical9.8	14.3% (97th)	—	no fix	2021-03-23	≤ 1.4.16
CVE-2021-21348US	high7.5	13.8% (97th)	—	no fix	2021-03-23	≤ 1.4.16
CVE-2021-43859US	high7.5	7.93% (95th)	—	no fix	2022-02-01	≤ 1.4.19
CVE-2021-39139US	high8.8	4.54% (92nd)	—	no fix	2021-08-23	≤ 1.4.18
CVE-2022-40151US	high7.5	2.22% (83rd)	—	no fix	2022-09-16	≤ 1.4.19
CVE-2024-47072US	—	2.00% (81st)	—	no fix	2024-11-08	≤ 1.4.20

The flaw types (CWEs) most of these CVEs share.

CWE-502Deserialization of Untrusted Data17 CVEs
CWE-434Unrestricted Upload of File with Dangerous Type6 CVEs
CWE-121Stack-based Buffer Overflow4 CVEs
CWE-94Improper Control of Generation of Code ('Code Injection')4 CVEs
CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')3 CVEs
CWE-918Server-Side Request Forgery (SSRF)3 CVEs
CWE-400Uncontrolled Resource Consumption2 CVEs
CWE-787Out-of-bounds Write2 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.