Description
Gerapy is a distributed crawler management framework. Gerapy prior to version 0.9.8 is vulnerable to remote code execution, and this issue is patched in version 0.9.8.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Gerapy | Gerapy | < 0.9.8 | — |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Exploit-DB 1
- Gerapy 0.9.7 - Remote Code Execution (RCE) (Authenticated) EDB-50640 · remote · Jan 5, 2022
GitHub 5 repositories
-
LongWayHomie/CVE-2021-43857 ★ 7 · Jan 3, 2022
Gerapy prior to version 0.9.8 is vulnerable to remote code execution. This issue is patched in version 0.9.8.
-
ProwlSec/gerapy-cve-2021-43857 ★ 2 · Jul 29, 2025
Proof of Concept exploit for CVE‑2021‑43857: Authenticated Remote Code Execution in Gerapy (<0.9.8). Updated and automated version of the original Exploit‑DB PoC for educational and authorized testin…
-
lowkey0808/CVE-2021-43857 ★ 1 · Apr 26, 2022
CVE-2021-43857(gerapy命令执行)
-
afifudinmtop/CVE-2021-43857-Gerapy-v0.9.7 ★ 0 · Jan 30, 2026
-
G4sp4rCS/CVE-2021-43857-POC ★ 0 · Apr 24, 2025
Optimized exploit for CVE-2021-43857 affecting Gerapy < 0.9.8
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | gerapy | < 0.9.8 | 0.9.8 | GHSA-9w7f-m4j4-j3xw |