# Impact of CVE-2021-29923 and CVE-2021-36221 on Mender

**URL:** <https://hub.mender.io/t/impact-of-cve-2021-29923-and-cve-2021-36221-on-mender/4030>\
**Category:** General Discussions\
**Created:** [August 25, 2021, 9:01am UTC](https://hub.mender.io/t/impact-of-cve-2021-29923-and-cve-2021-36221-on-mender/4030 "2021-08-25T09:01:34Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![deffo](https://avatars.discourse-cdn.com/v4/letter/d/ec9cab/32.png) [@deffo](https://hub.mender.io/u/deffo)\
**Post date:** [August 25, 2021, 9:01am UTC](https://hub.mender.io/t/impact-of-cve-2021-29923-and-cve-2021-36221-on-mender/4030/1 "2021-08-25T09:01:34Z")

</div>

Hi there!

How do you consider the impact of

[https://nvd.nist.gov/vuln/detail/CVE-2021-29923](https://nvd.nist.gov/vuln/detail/CVE-2021-29923)  
[https://nvd.nist.gov/vuln/detail/CVE-2021-36221](https://nvd.nist.gov/vuln/detail/CVE-2021-36221)

on Mender?

Do you think this is critical? We are asking since dunfell is directly affected with version 1.14.12.

Best regards

---

<div class="post-metadata">

**Author:** ![kacf](https://yyz2.discourse-cdn.com/flex036/user_avatar/hub.mender.io/kacf/32/146_2.png) [@kacf](https://hub.mender.io/u/kacf)\
**Post date:** [August 26, 2021, 5:43am UTC](https://hub.mender.io/t/impact-of-cve-2021-29923-and-cve-2021-36221-on-mender/4030/2 "2021-08-26T05:43:12Z")

</div>

Not affected, I believe. Mender neither uses ReverseProxy nor IP based access control.