What happened
A public source linked this CVE to an advisory or demonstration repository. Review the original reference before use.
Affected versions
Unknown product: See original advisory Fixed: See vendor advisory.
Why it matters
This source correlation may provide earlier visibility while structured CVE metadata is still being updated.
Detection & mitigation
- Review the original advisory and validate affected versions.
- Apply vendor-provided updates or mitigations when available.
Public PoC references
RepositoryAuthorFirst seenReference
PoC-in-GitHub · sotiak/CVE-2021-42574★ 1sotiak2021-11-01CandidatePoC-in-GitHub · hffaust/CVE-2021-42574_and_CVE-2021-42694★ 1hffaust2021-11-01CandidatePoC-in-GitHub · simplylu/CVE-2021-42574Generate malicious files using recently published bidi-attack (CVE-2021-42574)★ 8simplylu2021-11-02CandidatePoC-in-GitHub · maweil/bidi_char_detectorChecks your files for existence of Unicode BIDI characters which can be misused for supply chain attacks. See CVE-2021-42574★ 6maweil2021-11-06CandidatePoC-in-GitHub · pierDipi/unicode-control-characters-actionA GitHub Action to find Unicode control characters using the Red Hat diagnostic tool https://access.redhat.com/security/vulnerabilities/RHSB-2021-007 to detect RHSB-2021-007 Trojan source attacks (CVE-2021-42574,CVE-2021-42694)★ 0pierDipi2021-11-25CandidatePoC-in-GitHub · waseeld/CVE-2021-42574★ 1waseeld2021-12-11CandidatePoC-in-GitHub · tin-z/solidity_CVE-2021-42574-POCPOC of CVE-2021-42574 for solidity and solc compiler★ 3tin-z2023-01-31CandidatePoC-in-GitHub · Moshe-ship/bidi-guardScan code for invisible bidirectional Unicode characters (Trojan Source attack prevention, CVE-2021-42574)★ 5Moshe-ship2026-03-21CandidatePoC-in-GitHub · rakib-nyc/nulloriginResearch-only AI watermark & provenance robustness toolkit: local reverse proxy (OpenAI/Anthropic/Gemini) + CLI stripping C2PA/EXIF/XMP, zero-width & homoglyph Unicode, KGW text watermarks, DWT/Tree-Ring image stego, AudioSeal, PDF/DOCX/PPTX/XLSX metadata, and Trojan Source (CVE-2021-42574) code scanning.★ 5rakib-nyc2026-08-16CandidatePoC-in-GitHub · gitstq/GlyphGuard🔥 GlyphGuard — Lightweight Unicode Homoglyph & Invisible-Character Security Audit Engine | 轻量级 Unicode 同形字与不可见字符安全审计引擎 — Zero Dependencies, Trojan Source (CVE-2021-42574) Detection, Skeleton Mapping, CI Gate, Cross-Platform.★ 0gitstq2026-10-16CandidateSource timeline
Discovered through PoC-in-GitHubView source ↗
Record history
Record created from the first normalized source observation.
Metadata and source references refreshed.