CVE-2021-28134

CRITICAL 9.8CVE-2021-28134 · Published 11/03/2021 · updated 17/06/2026

In short

CVE-2021-28134 is a CRITICAL (CVSS 9.8) vulnerability affecting clipper (clipper project).
Chance of exploitation in the next 30 days (EPSS): 5.2%, higher than 92.5% of all vulnerabilities.
Fix: update to 1.0.5 or later.

Package	Affected versions	Patched versions
clipper clipper_project	`< 1.0.5`	`1.0.5`

Description

Clipper before 1.0.5 allows remote command execution. A remote attacker may send a crafted IPC message to the exposed vulnerable ipcRenderer IPC interface, which invokes the dangerous openExternal API.

References

AkashRajpurohit/clipper · Exploit
AkashRajpurohit/clipper#14 · Patch
AkashRajpurohit/clipper#14 · Patch
AkashRajpurohit/clipper release v1.0.5 · Patch

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free