CVE-2021-42574 repository

Generate malicious files using recently published bidi-attack (CVE-2021-42574)

Published 15 Oct 2026Updated 15 Oct 202631 sources

CVSS 0.0 PoC CANDIDATE

Overview Sources History

What happened

A public source linked this CVE to an advisory or demonstration repository. Review the original reference before use.

Affected versions

Unknown product: See original advisory Fixed: See vendor advisory.

Why it matters

This source correlation may provide earlier visibility while structured CVE metadata is still being updated.

Detection & mitigation

Review the original advisory and validate affected versions.
Apply vendor-provided updates or mitigations when available.

Public PoC references

RepositoryAuthorFirst seenReference

PoC-in-GitHub · sotiak/CVE-2021-42574★ 1sotiak2021-11-01Candidate PoC-in-GitHub · hffaust/CVE-2021-42574_and_CVE-2021-42694★ 1hffaust2021-11-01Candidate PoC-in-GitHub · simplylu/CVE-2021-42574Generate malicious files using recently published bidi-attack (CVE-2021-42574)★ 8simplylu2021-11-02Candidate PoC-in-GitHub · maweil/bidi_char_detectorChecks your files for existence of Unicode BIDI characters which can be misused for supply chain attacks. See CVE-2021-42574★ 6maweil2021-11-06Candidate PoC-in-GitHub · pierDipi/unicode-control-characters-actionA GitHub Action to find Unicode control characters using the Red Hat diagnostic tool https://access.redhat.com/security/vulnerabilities/RHSB-2021-007 to detect RHSB-2021-007 Trojan source attacks (CVE-2021-42574,CVE-2021-42694)★ 0pierDipi2021-11-25Candidate PoC-in-GitHub · waseeld/CVE-2021-42574★ 1waseeld2021-12-11Candidate PoC-in-GitHub · tin-z/solidity_CVE-2021-42574-POCPOC of CVE-2021-42574 for solidity and solc compiler★ 3tin-z2023-01-31Candidate PoC-in-GitHub · Moshe-ship/bidi-guardScan code for invisible bidirectional Unicode characters (Trojan Source attack prevention, CVE-2021-42574)★ 5Moshe-ship2026-03-21Candidate PoC-in-GitHub · rakib-nyc/nulloriginResearch-only AI watermark & provenance robustness toolkit: local reverse proxy (OpenAI/Anthropic/Gemini) + CLI stripping C2PA/EXIF/XMP, zero-width & homoglyph Unicode, KGW text watermarks, DWT/Tree-Ring image stego, AudioSeal, PDF/DOCX/PPTX/XLSX metadata, and Trojan Source (CVE-2021-42574) code scanning.★ 5rakib-nyc2026-08-16Candidate PoC-in-GitHub · gitstq/GlyphGuard🔥 GlyphGuard — Lightweight Unicode Homoglyph & Invisible-Character Security Audit Engine | 轻量级 Unicode 同形字与不可见字符安全审计引擎 — Zero Dependencies, Trojan Source (CVE-2021-42574) Detection, Skeleton Mapping, CI Gate, Cross-Platform.★ 0gitstq2026-10-16Candidate

Corrections Report an issue