CVE-2021-22053

Source
https://cve.org/CVERecord?id=CVE-2021-22053
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2021-22053.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2021-22053
Aliases
Published
2021-11-19T16:15:07.657Z
Modified
2025-11-14T11:16:17.007025Z
Severity
  • 8.8 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

Applications using both spring-cloud-netflix-hystrix-dashboard and spring-boot-starter-thymeleaf expose a way to execute code submitted within the request URI path during the resolution of view templates. When a request is made at /hystrix/monitor;[user-provided data], the path elements following hystrix/monitor are being evaluated as SpringEL expressions, which can lead to code execution.

References

Affected packages

Git / github.com/spring-cloud/spring-cloud-netflix

Affected ranges

Type
GIT
Repo
https://github.com/spring-cloud/spring-cloud-netflix
Events

Affected versions

v2.*
v2.1.4.RELEASE
v2.2.0.RELEASE
v2.2.1.RELEASE
v2.2.2.RELEASE
v2.2.3.RELEASE
v2.2.4.RELEASE
v2.2.5.RELEASE
v2.2.6.RELEASE
v2.2.7.RELEASE
v2.2.8.RELEASE
v2.2.9.RELEASE

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2021-22053.json"
vanir_signatures
[
    {
        "digest": {
            "function_hash": "147069515390022856780619286538412467610",
            "length": 87.0
        },
        "deprecated": false,
        "signature_version": "v1",
        "source": "https://github.com/spring-cloud/spring-cloud-netflix/commit/acc0e3b7353d4c9e826f95f4a7030f1a0ae58de9",
        "target": {
            "file": "spring-cloud-netflix-hystrix-stream/src/test/java/org/springframework/cloud/netflix/hystrix/stream/StreamSourceTestBase.java",
            "function": "receive"
        },
        "id": "CVE-2021-22053-02c5b996",
        "signature_type": "Function"
    },
    {
        "digest": {
            "function_hash": "69546055923522052883667558485253569382",
            "length": 194.0
        },
        "deprecated": false,
        "signature_version": "v1",
        "source": "https://github.com/spring-cloud/spring-cloud-netflix/commit/acc0e3b7353d4c9e826f95f4a7030f1a0ae58de9",
        "target": {
            "file": "spring-cloud-netflix-hystrix-stream/src/test/java/org/springframework/cloud/netflix/hystrix/stream/StreamSourceTestBase.java",
            "function": "assertData"
        },
        "id": "CVE-2021-22053-0d96a799",
        "signature_type": "Function"
    },
    {
        "digest": {
            "function_hash": "3197330944502672651526600620241610180",
            "length": 229.0
        },
        "deprecated": false,
        "signature_version": "v1",
        "source": "https://github.com/spring-cloud/spring-cloud-netflix/commit/acc0e3b7353d4c9e826f95f4a7030f1a0ae58de9",
        "target": {
            "file": "spring-cloud-netflix-turbine-stream/src/test/java/org/springframework/cloud/netflix/turbine/stream/TurbineStreamTests.java",
            "function": "extractMetrics"
        },
        "id": "CVE-2021-22053-11f48a97",
        "signature_type": "Function"
    },
    {
        "digest": {
            "function_hash": "13827504915646211612557782714609800744",
            "length": 45.0
        },
        "deprecated": false,
        "signature_version": "v1",
        "source": "https://github.com/spring-cloud/spring-cloud-netflix/commit/acc0e3b7353d4c9e826f95f4a7030f1a0ae58de9",
        "target": {
            "file": "spring-cloud-netflix-hystrix-stream/src/test/java/org/springframework/cloud/netflix/hystrix/stream/StreamSourceTestBase.java",
            "function": "hello"
        },
        "id": "CVE-2021-22053-142fe2f0",
        "signature_type": "Function"
    },
    {
        "digest": {
            "function_hash": "219376724692126769430533596530332414196",
            "length": 142.0
        },
        "deprecated": false,
        "signature_version": "v1",
        "source": "https://github.com/spring-cloud/spring-cloud-netflix/commit/acc0e3b7353d4c9e826f95f4a7030f1a0ae58de9",
        "target": {
            "file": "spring-cloud-netflix-turbine-stream/src/test/java/org/springframework/cloud/netflix/turbine/stream/TurbineStreamTests.java",
            "function": "intercept"
        },
        "id": "CVE-2021-22053-1ebc7a4f",
        "signature_type": "Function"
    },
    {
        "digest": {
            "function_hash": "14253886598330793045104837835542401897",
            "length": 66.0
        },
        "deprecated": false,
        "signature_version": "v1",
        "source": "https://github.com/spring-cloud/spring-cloud-netflix/commit/acc0e3b7353d4c9e826f95f4a7030f1a0ae58de9",
        "target": {
            "file": "spring-cloud-netflix-hystrix-stream/src/test/java/org/springframework/cloud/netflix/hystrix/stream/StreamSourceTestBase.java",
            "function": "contractVerifierMessageExchange"
        },
        "id": "CVE-2021-22053-23c2fcd3",
        "signature_type": "Function"
    },
    {
        "digest": {
            "function_hash": "163313135600569422645478190431452480487",
            "length": 74.0
        },
        "deprecated": false,
        "signature_version": "v1",
        "source": "https://github.com/spring-cloud/spring-cloud-netflix/commit/acc0e3b7353d4c9e826f95f4a7030f1a0ae58de9",
        "target": {
            "file": "spring-cloud-netflix-turbine-stream/src/test/java/org/springframework/cloud/netflix/turbine/stream/TurbineStreamTests.java",
            "function": "getStatusText"
        },
        "id": "CVE-2021-22053-278ee57f",
        "signature_type": "Function"
    },
    {
        "digest": {
            "function_hash": "199613895095013015275930686817002651503",
            "length": 527.0
        },
        "deprecated": false,
        "signature_version": "v1",
        "source": "https://github.com/spring-cloud/spring-cloud-netflix/commit/acc0e3b7353d4c9e826f95f4a7030f1a0ae58de9",
        "target": {
            "file": "spring-cloud-netflix-hystrix-stream/src/test/java/org/springframework/cloud/netflix/hystrix/stream/StreamSourceTestBase.java",
            "function": "receive"
        },
        "id": "CVE-2021-22053-27f5e8dd",
        "signature_type": "Function"
    },
    {
        "digest": {
            "function_hash": "21300388223790117613649418462249406717",
            "length": 88.0
        },
        "deprecated": false,
        "signature_version": "v1",
        "source": "https://github.com/spring-cloud/spring-cloud-netflix/commit/acc0e3b7353d4c9e826f95f4a7030f1a0ae58de9",
        "target": {
            "file": "spring-cloud-netflix-hystrix-stream/src/test/java/org/springframework/cloud/netflix/hystrix/stream/StreamSourceTestBase.java",
            "function": "assertEvent"
        },
        "id": "CVE-2021-22053-3f32ec7f",
        "signature_type": "Function"
    },
    {
        "digest": {
            "function_hash": "277392907539268457156079163126820017801",
            "length": 230.0
        },
        "deprecated": false,
        "signature_version": "v1",
        "source": "https://github.com/spring-cloud/spring-cloud-netflix/commit/acc0e3b7353d4c9e826f95f4a7030f1a0ae58de9",
        "target": {
            "file": "spring-cloud-netflix-hystrix-stream/src/test/java/org/springframework/cloud/netflix/hystrix/stream/StreamSourceTestBase.java",
            "function": "converter"
        },
        "id": "CVE-2021-22053-4d143ea5",
        "signature_type": "Function"
    },
    {
        "digest": {
            "function_hash": "266551320276803931553020999884098329359",
            "length": 91.0
        },
        "deprecated": false,
        "signature_version": "v1",
        "source": "https://github.com/spring-cloud/spring-cloud-netflix/commit/acc0e3b7353d4c9e826f95f4a7030f1a0ae58de9",
        "target": {
            "file": "spring-cloud-netflix-hystrix-stream/src/test/java/org/springframework/cloud/netflix/hystrix/stream/StreamSourceTestBase.java",
            "function": "main"
        },
        "id": "CVE-2021-22053-4f4b80c5",
        "signature_type": "Function"
    },
    {
        "digest": {
            "function_hash": "163313135600569422645478190431452480487",
            "length": 74.0
        },
        "deprecated": false,
        "signature_version": "v1",
        "source": "https://github.com/spring-cloud/spring-cloud-netflix/commit/acc0e3b7353d4c9e826f95f4a7030f1a0ae58de9",
        "target": {
            "file": "spring-cloud-netflix-turbine-stream/src/test/java/org/springframework/cloud/netflix/turbine/stream/TurbineStreamTests.java",
            "function": "getBody"
        },
        "id": "CVE-2021-22053-590b9fec",
        "signature_type": "Function"
    },
    {
        "digest": {
            "function_hash": "282609045887960088608657254384311742654",
            "length": 623.0
        },
        "deprecated": false,
        "signature_version": "v1",
        "source": "https://github.com/spring-cloud/spring-cloud-netflix/commit/acc0e3b7353d4c9e826f95f4a7030f1a0ae58de9",
        "target": {
            "file": "spring-cloud-netflix-turbine-stream/src/test/java/org/springframework/cloud/netflix/turbine/stream/TurbineStreamTests.java",
            "function": "contextLoads"
        },
        "id": "CVE-2021-22053-5fd42844",
        "signature_type": "Function"
    },
    {
        "digest": {
            "function_hash": "62734605422891232261275790759535687333",
            "length": 177.0
        },
        "deprecated": false,
        "signature_version": "v1",
        "source": "https://github.com/spring-cloud/spring-cloud-netflix/commit/acc0e3b7353d4c9e826f95f4a7030f1a0ae58de9",
        "target": {
            "file": "spring-cloud-netflix-hystrix-stream/src/test/java/org/springframework/cloud/netflix/hystrix/stream/StreamSourceTestBase.java",
            "function": "assertOrigin"
        },
        "id": "CVE-2021-22053-60eaeccc",
        "signature_type": "Function"
    },
    {
        "digest": {
            "line_hashes": [
                "90145254924984011332354932868123807634",
                "220693160014543210602000580773444817323",
                "294972301328507122120809297070298357878",
                "154822196157543491605971020732804520018",
                "137845069407588992741823633241575701625",
                "142068309851829102841995001297333415326",
                "327901771601261165198081007967192888991",
                "313725205405907763392988372389180712887",
                "194295357380623551792232683372592286551",
                "169391854534719243228713010174736057503",
                "126929969500613698455773208306525519137",
                "275308585525858780690795405613333454432",
                "63858272724131377392983923927416201615",
                "113342238756221675528650448930816487313",
                "328677038142019129547850913141613511662",
                "24819524818499563256864742383896403357",
                "242704666992249415754770159793180697111",
                "258944665157598696007305017861323902420",
                "2648815562331205684417831165454512899",
                "273329415841743509030914347507409617562",
                "322323810891557588755087530492154385444",
                "203666559519990706140172097832063882735",
                "335560296575624871025980884489962454139",
                "180856705056887664372230283400451217719",
                "220077382695687994767845685376358008699",
                "336908814082957278586237789345028997180",
                "38320841371144008393814979231371975123",
                "270893542320840938785704679621348157844",
                "246320465417377653638136211153547494040",
                "176733971188591822372653440929039851115",
                "308445914141322662858023778140427222888",
                "144601905844674982354074600737772134416",
                "42037386700337205451521867523403087755",
                "193771725642577539993769300670957239374",
                "24394982154909663730627296717973360278",
                "101376221853373222557090512443758219933",
                "237421036306311247180749618802354152729",
                "92722240337415897286870846521452314624",
                "192256523032693957729932043772471709596",
                "228260217512517077658647610282135049293",
                "35659311992747751777461003061836005938",
                "119797100765963437890779099817884286592",
                "15926689543997405686450911799625259489",
                "283284801095940523625360991940500896219",
                "7458172040605872996879534579857816178",
                "66876842651700927489242030803723765393",
                "97564072401913195448012844762485003299",
                "25583145874598898618582657222061869807",
                "262165008687088299190841075201413595117",
                "5434294546896129893699001988941215495",
                "14765345149722348487722536088858181885",
                "78237479036118041363840323582927324871",
                "270321532367366022982579225091741191950",
                "77902485896292618381685777080146855307",
                "210288995103810679158639954476825306738",
                "16374803769046094040789070597035738237",
                "133772074417937950084054236410746485892",
                "257935125944374630507063793725436127761",
                "49884269863000014787782411453642670286",
                "150610898632035764406383211383260995591",
                "73081158692186389318904011582428750108",
                "181451582915008655360079189018150312255",
                "302948693043466300891546473534883473712",
                "333672617258394838312932793660877082512",
                "204436055611357200313796894155667099320",
                "211285619466087402193996707533589002494",
                "301098125586750407081571852489690180573",
                "262016200704633311295566429490328893224",
                "166947946974863443660291990655378413757",
                "33182912644677039810997916301659579800",
                "88339247802371102763684079961664865983",
                "64742137665161684029538721924634004804",
                "336646969385074310576767472869452925290",
                "294297777805092618067388413231064719122",
                "82336616230984805875622489251831322793",
                "220884027888050459794073188008898298494",
                "277945791546939720317374780028133432867",
                "277661573421828460391378730644853748790",
                "262586119875169092990446708208835093806",
                "95622803794879004857005777639936566541",
                "144012025510532601374437458723974016890",
                "249809761816122563849268165962618935875",
                "111488957020687446327284173898448756812",
                "307776157546419518314880041443723483133",
                "299630565837243991226877513069445236561",
                "26261522195723081595887117440805879593",
                "30779440197970092919254145444827567010",
                "172151827709444548631362191340512174680",
                "219604717265359222617084033477877567594",
                "161284993587745239789899150423296096515",
                "22224275012404714180733044056179303773",
                "334672793058658255022094959800373807689",
                "219164724685921683249605063979484261848",
                "69312982664535296177258043526773293505",
                "313549435370507117192765250676986323680",
                "12831423852637307330304808019962805",
                "106368413531806607742808103040360119692",
                "242497007412370853294295730505525755514",
                "256785882144412074067587597756301828998",
                "59837888672644298823287927247185319286",
                "166563183960387332575892357723571552914",
                "114785164334162246898189433780298640197",
                "262740597856367534406703607203957642665",
                "35855368906459616198625567627951573956",
                "85783818697471582137034974572910768666",
                "27707338360337837888198494371477948096",
                "75568462624186050610834321175128009348",
                "134379556673375691151791734142716107423",
                "182373425453589072285610330096353203630",
                "236904865716522483851704443752872315652",
                "137219017532449865730507914384497438554",
                "155040019603906063331668158034127956491",
                "55996399588806491533822398930550476294",
                "206356555896915644482412294486751146436",
                "251006384774316115882697697447759349783",
                "337817913701237772249818636792851132510",
                "234184485777759383239505058683341848057",
                "114219754465410113365275679263778258149",
                "199907454443378642888906312734808315022",
                "125050612813281581797530059142762777327",
                "82842495863089117082926377146542112272",
                "113396672167138360195932787600485278403",
                "124513829498203914758347663793588190941",
                "316636935996896973734882107753361606267",
                "207480330583400295227702235223742240201",
                "253899812057785737405744613966997440747",
                "37038933448063846459613842244546807694",
                "141056322149024924511091599404387724550",
                "1150533057489696042999728045497959563",
                "29329931966865968159824759494739849285",
                "71458827222320156992220698344471802351",
                "93461432770308323737212549875972589302",
                "213316785841539582043265605273341417179",
                "25706175893953623246726902681818303734",
                "45045043057693871396040716012448770383",
                "135540763892879452507354487084159772251",
                "108587633537507210242609878158511307392"
            ],
            "threshold": 0.9
        },
        "deprecated": false,
        "signature_version": "v1",
        "source": "https://github.com/spring-cloud/spring-cloud-netflix/commit/acc0e3b7353d4c9e826f95f4a7030f1a0ae58de9",
        "target": {
            "file": "spring-cloud-netflix-turbine-stream/src/test/java/org/springframework/cloud/netflix/turbine/stream/TurbineStreamTests.java"
        },
        "id": "CVE-2021-22053-7ae43165",
        "signature_type": "Line"
    },
    {
        "digest": {
            "function_hash": "45178275718944758447062834043860974696",
            "length": 22.0
        },
        "deprecated": false,
        "signature_version": "v1",
        "source": "https://github.com/spring-cloud/spring-cloud-netflix/commit/acc0e3b7353d4c9e826f95f4a7030f1a0ae58de9",
        "target": {
            "file": "spring-cloud-netflix-turbine-stream/src/test/java/org/springframework/cloud/netflix/turbine/stream/TurbineStreamTests.java",
            "function": "close"
        },
        "id": "CVE-2021-22053-89332d50",
        "signature_type": "Function"
    },
    {
        "digest": {
            "function_hash": "228884836974702528620166921917574402257",
            "length": 721.0
        },
        "deprecated": false,
        "signature_version": "v1",
        "source": "https://github.com/spring-cloud/spring-cloud-netflix/commit/acc0e3b7353d4c9e826f95f4a7030f1a0ae58de9",
        "target": {
            "file": "spring-cloud-netflix-hystrix-stream/src/test/java/org/springframework/cloud/netflix/hystrix/stream/StreamSourceTestBase.java",
            "function": "resolvedDestination"
        },
        "id": "CVE-2021-22053-907e9f7e",
        "signature_type": "Function"
    },
    {
        "digest": {
            "function_hash": "246292551476318380226822692827099592458",
            "length": 68.0
        },
        "deprecated": false,
        "signature_version": "v1",
        "source": "https://github.com/spring-cloud/spring-cloud-netflix/commit/acc0e3b7353d4c9e826f95f4a7030f1a0ae58de9",
        "target": {
            "file": "spring-cloud-netflix-hystrix-stream/src/test/java/org/springframework/cloud/netflix/hystrix/stream/StreamSourceTestBase.java",
            "function": "createMetricsData"
        },
        "id": "CVE-2021-22053-aca77392",
        "signature_type": "Function"
    },
    {
        "digest": {
            "function_hash": "212273756588899664007932731248660083447",
            "length": 105.0
        },
        "deprecated": false,
        "signature_version": "v1",
        "source": "https://github.com/spring-cloud/spring-cloud-netflix/commit/acc0e3b7353d4c9e826f95f4a7030f1a0ae58de9",
        "target": {
            "file": "spring-cloud-netflix-turbine-stream/src/test/java/org/springframework/cloud/netflix/turbine/stream/TurbineStreamTests.java",
            "function": "containsMetrics"
        },
        "id": "CVE-2021-22053-adf2d721",
        "signature_type": "Function"
    },
    {
        "digest": {
            "function_hash": "227457002733301553544057398011181132723",
            "length": 118.0
        },
        "deprecated": false,
        "signature_version": "v1",
        "source": "https://github.com/spring-cloud/spring-cloud-netflix/commit/acc0e3b7353d4c9e826f95f4a7030f1a0ae58de9",
        "target": {
            "file": "spring-cloud-netflix-hystrix-stream/src/test/java/org/springframework/cloud/netflix/hystrix/stream/StreamSourceTestBase.java",
            "function": "create"
        },
        "id": "CVE-2021-22053-ae9e71c4",
        "signature_type": "Function"
    },
    {
        "digest": {
            "function_hash": "254186825028858415518575788089571891685",
            "length": 55.0
        },
        "deprecated": false,
        "signature_version": "v1",
        "source": "https://github.com/spring-cloud/spring-cloud-netflix/commit/acc0e3b7353d4c9e826f95f4a7030f1a0ae58de9",
        "target": {
            "file": "spring-cloud-netflix-turbine-stream/src/test/java/org/springframework/cloud/netflix/turbine/stream/TurbineStreamTests.java",
            "function": "getHeaders"
        },
        "id": "CVE-2021-22053-c21e16ec",
        "signature_type": "Function"
    },
    {
        "digest": {
            "function_hash": "185172091638644197159546896705455783299",
            "length": 335.0
        },
        "deprecated": false,
        "signature_version": "v1",
        "source": "https://github.com/spring-cloud/spring-cloud-netflix/commit/acc0e3b7353d4c9e826f95f4a7030f1a0ae58de9",
        "target": {
            "file": "spring-cloud-netflix-hystrix-stream/src/test/java/org/springframework/cloud/netflix/hystrix/stream/StreamSourceTestBase.java",
            "function": "send"
        },
        "id": "CVE-2021-22053-d12b75cf",
        "signature_type": "Function"
    },
    {
        "digest": {
            "function_hash": "105884125516598735245200931990071024799",
            "length": 451.0
        },
        "deprecated": false,
        "signature_version": "v1",
        "source": "https://github.com/spring-cloud/spring-cloud-netflix/commit/acc0e3b7353d4c9e826f95f4a7030f1a0ae58de9",
        "target": {
            "file": "spring-cloud-netflix-turbine-stream/src/test/java/org/springframework/cloud/netflix/turbine/stream/TurbineStreamTests.java",
            "function": "extract"
        },
        "id": "CVE-2021-22053-de92337c",
        "signature_type": "Function"
    },
    {
        "digest": {
            "line_hashes": [
                "222408691498849221430322516096443031694",
                "264336582674230359631274907716183995101",
                "234850640459308252365397533773846846514",
                "339997800452522575475452399644501962357",
                "174157587823318966288185040767255640519",
                "46170227168932139062625957482480971779",
                "130978820422113207131728075198681537136",
                "547442796719447748481855807714306179",
                "78056666190403992230487245932621805163",
                "238945409155807281660467489080326241226",
                "110207852781199367684050999974510014900",
                "310058352012021973518757005477320923061",
                "277508938306293758785490889043002638031",
                "201392256811906007919332512390620124152",
                "228410155249152542093187727809065607371",
                "15265052246379789765340565166026367874",
                "252309388042159964448751277974025963556",
                "334016824016098042258987293581159835247",
                "302560689811873861304737115483164089239",
                "271056924424184855360155114365643356201",
                "280832059225172491515590999373391198160",
                "299728499750540224303640145288307810385",
                "223329397906571785247037849558461420041",
                "84055235027806099189464956783710279810",
                "213554096272143632619593485582518732970",
                "271327369963863293367125555367419640343",
                "71611449219346938321057197323421611139",
                "83331156734795933584463169335123667504",
                "333576032545432768314404607422047032254",
                "5825657797117372012702358398214685284",
                "101773535648839311546959110504780637511",
                "87228277426986676987600319161920963570",
                "332252994751041851453632671757156546875",
                "165050622348662617489044286044330060624",
                "184665270245284577006321264817381384580",
                "278681554717346632593297548629912805950",
                "278311573454808875413167112832312359645",
                "325470798614742385725507103136033971517",
                "128432193640170273113890757644796172",
                "245999571245606441623085930239201442030",
                "36265102626755358673964735459709814367",
                "287779327990796657603197742934569281036",
                "132035274010301935678083572189533475730",
                "329129759155403023346737279299297797420",
                "133471770002725725411083115902896189018",
                "188900180309239302554962399146990180914",
                "169549144741525361252916878118057890333",
                "95149098753791979031954257791334147934",
                "323891339545021177948605963505285610338",
                "100217754730464488168697198657585327590",
                "145439641358278391261236857690966112892",
                "154340977194980410036102550683437509985",
                "102776195788871613499887291427497550957",
                "78166326143504841599058670041962988825",
                "138056019759980589936411929483491991332",
                "6261972536565341248418057699351417299",
                "201290146504705788908733740108017507598",
                "44829803556367895711556527043310023603",
                "42832071484780700707999434397502948115",
                "174048279950097865456338040097752977651",
                "43640726708581251575489706248148385034",
                "154492509760295403089317194656633546032",
                "127539131601857017241231225719901237827",
                "154491864074643073902278714335955953845",
                "288212923963971098708799094371519328898",
                "116979087020172428749715114082032243341",
                "20212433137863034118916597038955111716",
                "65417614017764933662148915860538125844",
                "330684230260997501491683526743093279514",
                "208486751396070536982713635510056308996",
                "329088380984257797168513769621538534331",
                "247968967056162432092631759219478486774",
                "184876713705894646599654563045136088089",
                "203899665356908621636895876354057369158",
                "152343034253151857983641399824273447570",
                "215971593568226313644165787028751384194",
                "29070342244864672531123243225070326225",
                "134084011291769129830506660799274407584",
                "154686563858318608070911950695477026478",
                "222611844683237571592084424757987952158",
                "64552651762731706877256820818414869306",
                "301080347243145831929025082005067954189",
                "203426339289080402585216556224988873872",
                "106896440413315976769532225271619031707",
                "32215045324023739559501689378794890962",
                "302356989825778479147931829970915841209",
                "26023277695465395141751392961542064232",
                "83861527231097759110880537788696575866",
                "313325108013303942829059226290492831888",
                "157056437570022532749019069689505429889",
                "233124274336108042119303592366139579290",
                "313649373809361452513815805798982798025",
                "152931007691720157174395937965614537071",
                "304689237978676062438787700362581280127",
                "326620193768233390802772939921046314347",
                "156528566330821287652436598633467215754",
                "219849679195676872356148397973454149446",
                "149924100230443945109656893091307027407",
                "61278088014012028772238725724189546718",
                "76333115879818590259947889744825163708",
                "148225620028733763936009931793178591278",
                "69043773533432606181062807357605730931",
                "246868491484633236470552484329039091270",
                "11905228690193316406899556023427446102",
                "168938628850711120099134415322052894071",
                "162525683819943468447125488788088318561",
                "298288567551063792361356740822261951079",
                "338740696082427032379925797789091488992",
                "194173758055782845097881244299636621559",
                "120831003248371860480479230724487100451",
                "114694186135962658436561462406184008213",
                "263007951599768059219627039553166019080",
                "96781915234279855520238347583718869973",
                "78848422834167535908670201549881220919",
                "249903201326947433449658030984405442237",
                "243094739002901252632590297808779944884",
                "38552987258332208232827634763103146092",
                "334944410834435632238394195220516183100",
                "87001364407293342968126126892288156363",
                "1629371519237533925193262811043021831",
                "114493347016833479385122989107250991698",
                "211985229113820434938534949507853624881",
                "28625992821694066692953253132940363725",
                "27686510337561686228831571592067429471",
                "175188562690678497618937957486306068583",
                "261567415423002163128771624050911991468",
                "117313684035350866103216509791937828002",
                "242267161198319506800752380232932182133",
                "177615874144798470731054238707907589224",
                "257939192585496050622376530878818942481",
                "84956596515743950844518518656630280932",
                "286687054182527966878923075934758242010",
                "201708924572732590844770370078756805794",
                "159020787274385066049011092554520702106",
                "118988703539672092402188858573489424659",
                "254376014864044734080887348671244062959",
                "328024478709571809379719771702951477145",
                "185646339874662545593231734737669083696",
                "310108014568152828450814530286960118868",
                "225311358978625941115958070875829239881",
                "168050714316986091874386905085899151576",
                "43920164959883854238899096087032470491",
                "219576519910111171557436639336366628328",
                "18456780242002183878668356521005384536",
                "33091143164019887274504989294720117420",
                "176374558587485341314227272638013248080",
                "268653692007465805334431353562235559286",
                "299510020595723003458433639684758553354",
                "276517477161212355079811502195313759253",
                "57868107235874514055063797412930691139",
                "24735648284985033096433079664408685758",
                "267373420793770858560145798645985984940",
                "207755601945091254250063954064774358720",
                "165741307647131061158395594842040002528",
                "34189915120043675365475810926679095421",
                "180316570699073559982429773760717299109",
                "75800596275658159321550501923187326432",
                "186208998119066671591639251030126409386",
                "311528489179258047074618262726410412136",
                "134791481543290981548997123911495640302",
                "227777173003276018835218355863255933524",
                "71682771482736052003963484953457599658",
                "6089807360111033833114166772592472785",
                "265158330453706106516169532335166575748",
                "313318469130993472965966328141783422304",
                "89856334206181719171922088441328159341",
                "304835978974301437309158401521818306086",
                "329906942971676379778143390996516508611",
                "251759582914531167259367232247728620842",
                "204970926117735208983912209965846693070",
                "54729141470096542568657971955251605083",
                "135188255662261828008734143390581865444",
                "33965333931606731080931958503875492682",
                "103699471306575123464054498902439303668",
                "39052330147909020146610904222451275168",
                "289613734839076128696755815318963952932",
                "227479179792892180484168232533555208542",
                "170361224647780031139632753563411837311",
                "37552992420950331109434071701910773883",
                "262135777316244807973251513204255974188",
                "67083026398427555306087474126973463758"
            ],
            "threshold": 0.9
        },
        "deprecated": false,
        "signature_version": "v1",
        "source": "https://github.com/spring-cloud/spring-cloud-netflix/commit/acc0e3b7353d4c9e826f95f4a7030f1a0ae58de9",
        "target": {
            "file": "spring-cloud-netflix-hystrix-stream/src/test/java/org/springframework/cloud/netflix/hystrix/stream/StreamSourceTestBase.java"
        },
        "id": "CVE-2021-22053-e275f334",
        "signature_type": "Line"
    },
    {
        "digest": {
            "function_hash": "163313135600569422645478190431452480487",
            "length": 74.0
        },
        "deprecated": false,
        "signature_version": "v1",
        "source": "https://github.com/spring-cloud/spring-cloud-netflix/commit/acc0e3b7353d4c9e826f95f4a7030f1a0ae58de9",
        "target": {
            "file": "spring-cloud-netflix-turbine-stream/src/test/java/org/springframework/cloud/netflix/turbine/stream/TurbineStreamTests.java",
            "function": "getRawStatusCode"
        },
        "id": "CVE-2021-22053-e2d47524",
        "signature_type": "Function"
    },
    {
        "digest": {
            "function_hash": "253396314502287802855671191785020268833",
            "length": 170.0
        },
        "deprecated": false,
        "signature_version": "v1",
        "source": "https://github.com/spring-cloud/spring-cloud-netflix/commit/acc0e3b7353d4c9e826f95f4a7030f1a0ae58de9",
        "target": {
            "file": "spring-cloud-netflix-hystrix-stream/src/test/java/org/springframework/cloud/netflix/hystrix/stream/StreamSourceTestBase.java",
            "function": "createJacksonConverter"
        },
        "id": "CVE-2021-22053-eb2bd757",
        "signature_type": "Function"
    },
    {
        "digest": {
            "function_hash": "163313135600569422645478190431452480487",
            "length": 74.0
        },
        "deprecated": false,
        "signature_version": "v1",
        "source": "https://github.com/spring-cloud/spring-cloud-netflix/commit/acc0e3b7353d4c9e826f95f4a7030f1a0ae58de9",
        "target": {
            "file": "spring-cloud-netflix-turbine-stream/src/test/java/org/springframework/cloud/netflix/turbine/stream/TurbineStreamTests.java",
            "function": "getStatusCode"
        },
        "id": "CVE-2021-22053-ed2e440b",
        "signature_type": "Function"
    },
    {
        "digest": {
            "function_hash": "216190859915552726671707505792069809036",
            "length": 51.0
        },
        "deprecated": false,
        "signature_version": "v1",
        "source": "https://github.com/spring-cloud/spring-cloud-netflix/commit/acc0e3b7353d4c9e826f95f4a7030f1a0ae58de9",
        "target": {
            "file": "spring-cloud-netflix-turbine-stream/src/test/java/org/springframework/cloud/netflix/turbine/stream/TurbineStreamTests.java",
            "function": "NonClosingResponse"
        },
        "id": "CVE-2021-22053-f2602f9e",
        "signature_type": "Function"
    },
    {
        "digest": {
            "function_hash": "12354929864459087941458055486382457063",
            "length": 129.0
        },
        "deprecated": false,
        "signature_version": "v1",
        "source": "https://github.com/spring-cloud/spring-cloud-netflix/commit/acc0e3b7353d4c9e826f95f4a7030f1a0ae58de9",
        "target": {
            "file": "spring-cloud-netflix-hystrix-stream/src/test/java/org/springframework/cloud/netflix/hystrix/stream/StreamSourceTestBase.java",
            "function": "send"
        },
        "id": "CVE-2021-22053-f2831210",
        "signature_type": "Function"
    },
    {
        "digest": {
            "function_hash": "55680073810184157588248523650417666513",
            "length": 114.0
        },
        "deprecated": false,
        "signature_version": "v1",
        "source": "https://github.com/spring-cloud/spring-cloud-netflix/commit/acc0e3b7353d4c9e826f95f4a7030f1a0ae58de9",
        "target": {
            "file": "spring-cloud-netflix-hystrix-stream/src/test/java/org/springframework/cloud/netflix/hystrix/stream/StreamSourceTestBase.java",
            "function": "PatchedStubMessages"
        },
        "id": "CVE-2021-22053-fa1ba95b",
        "signature_type": "Function"
    }
]