{"id":"CVE-2021-34364","details":"The Refined GitHub browser extension before 21.6.8 might allow XSS via a link in a document. NOTE: github.com sends Content-Security-Policy headers to, in general, address XSS and other concerns.","modified":"2026-07-09T05:45:30.589693Z","published":"2021-06-09T11:15:07.583Z","references":[{"type":"ADVISORY","url":"https://github.com/sindresorhus/refined-github/releases/tag/21.6.8"},{"type":"ADVISORY","url":"https://vuln.ryotak.me/advisories/47"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/refined-github/refined-github","events":[{"introduced":"0"},{"fixed":"6f27970fe351f24086298504dd9d8a6490a8a64a"}],"database_specific":{"cpe":"cpe:2.3:a:refined-github_project:refined-github:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"0"},{"fixed":"21.6.8"}],"source":["CPE_RANGE","REFERENCES"]}}],"versions":["21.6.1","21.5.19","21.5.10","21.5.9","21.5.1","21.4.23","21.4.13","21.4.6","21.4.2","21.3.26","21.3.17","21.3.11","21.3.5","21.3.1","21.2.23","21.2.19","21.2.9","21.2.1","21.1.23","21.1.17","21.1.10","21.1.7","21.1.1","20.12.27","20.12.24","20.12.19","20.12.9","20.12.3","20.11.26","20.11.19","20.11.12","20.11.6","20.11.5","20.10.29","20.10.22","20.10.15","20.10.8","20.10.1","20.9.24","20.9.17","20.9.11","20.9.10","20.9.4.1817","20.9.3","20.8.30","20.8.27","20.8.23","20.8.20","20.8.16","20.8.13","20.8.10","20.8.6","20.8.2","20.7.30","20.7.26","20.7.23","20.7.19","20.7.16","20.7.12","20.7.10","20.7.9","20.7.2","20.6.25","20.6.18","20.6.11","20.6.4","20.5.27","20.5.25","20.5.21","20.5.19","20.5.11","20.5.7","20.5.3","20.4.28","20.4.21","20.4.14","20.4.9","20.4.5","20.4.1","20.3.29","20.3.26","20.3.22","20.3.16","20.3.13","20.3.6","20.3.4","20.3.3","20.2.28","20.2.19","20.2.18","20.2.14","20.2.3","20.1.22","20.1.14.1820","20.1.14","20.1.6","19.12.22","19.12.20","19.12.17","19.12.16","19.12.9","19.12.7","19.12.2","19.12.1","19.11.30","19.11.25","19.11.22","19.11.21","19.11.20","19.11.19","19.11.14","19.11.13","19.11.8","19.11.3","19.10.31","19.10.28","19.10.13","19.10.12","19.10.11","19.10.10","19.9.27","19.9.26","19.9.19","19.9.17","19.9.16","19.9.15","19.9.11","19.9.10","19.9.8","19.9.6","19.9.4","19.9.3","19.9.2","19.9.1","19.8.31","19.8.29","19.8.26","19.8.25","19.8.24","19.8.23","19.8.21","19.8.20","19.8.16","19.8.14","19.8.13","19.8.11","19.8.9","19.8.6","19.8.5","19.8.4","19.8.3","19.7.30","19.7.29","19.7.26","19.7.24","19.7.20","19.7.19","19.7.18","19.7.14","19.7.11","19.7.10","19.7.5","19.7.3","19.6.30","19.6.29","19.6.28","19.6.27","19.6.26","19.6.24","19.6.23","19.6.22.1940","19.6.22","19.6.9","19.6.8","19.6.7","19.6.6.1207","19.6.3","19.6.2","19.6.1.1927","19.5.30.1925","19.5.28.1925","19.5.27.1925","19.5.26.1924","19.5.25.1923","19.5.24.1922","19.5.23.1922","19.5.22.1921","19.5.21.1921","19.5.20.1920","19.5.19.1547","19.5.18.1919","19.5.18.1335","19.6.13.1034","19.5.25.1548","19.5.19.1032","19.5.18.1333","19.5.17.1704","19.5.13.1920","19.5.12.1917","19.5.11.1917","1.20.1","1.20.0","1.19.0","1.17.0","1.16.1","1.16.0","1.15.1","1.15.0","1.14.0","1.13.0","1.12.1","1.12.0","1.11.1","1.11.0","1.10.0","1.9.1","1.9.0","1.8.0","1.7.0","1.6.2","1.6.1","1.6.0","1.5.1","1.5.0","1.4.0","1.3.0","1.2.1","1.1.0","1.0.4","1.0.3","1.0.2","1.0.0","0.13.0","0.12.0","0.11.0","0.10.0","0.9.1","0.9.0","0.8.0","0.7.0","0.6.0","0.5.0","0.4.0","0.3.1","0.3.0","0.2.0","0.1.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-34364.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"}]}