# Splunk Universal Forwarder


- [CVE-2023-27533](https://insights.sbomify.com/CVE-2023-27533/): Command injection in https://github.com/curl/curl (critical 9.8)
- [CVE-2022-32221](https://insights.sbomify.com/CVE-2022-32221/): Use after free in https://github.com/curl/curl (critical 9.8)
- [CVE-2022-36227](https://insights.sbomify.com/CVE-2022-36227/): Null dereference in n/a (critical 9.8)
- [CVE-2022-32207](https://insights.sbomify.com/CVE-2022-32207/): Misconfiguration in https://github.com/curl/curl (critical 9.8)
- [CVE-2021-3520](https://insights.sbomify.com/CVE-2021-3520/): lz4-sys vulnerable to memory corruption via issue in liblz4 (critical 9.8)
- [CVE-2023-23914](https://insights.sbomify.com/CVE-2023-23914/): Security feature bypass in https://github.com/curl/curl (critical 9.1)
- [CVE-2021-22945](https://insights.sbomify.com/CVE-2021-22945/): Use after free in https://github.com/curl/curl (critical 9.1)
- [CVE-2023-27534](https://insights.sbomify.com/CVE-2023-27534/): Path traversal in https://github.com/curl/curl (high 8.8)
- [CVE-2021-30560](https://insights.sbomify.com/CVE-2021-30560/): Nokogiri has vulnerable dependencies on libxml2 and libxslt (high 8.8)
- [CVE-2022-42915](https://insights.sbomify.com/CVE-2022-42915/): Use after free in n/a (high 8.1)
- [CVE-2022-27778](https://insights.sbomify.com/CVE-2022-27778/): Other in https://github.com/curl/curl (high 8.1)
- [CVE-2022-22576](https://insights.sbomify.com/CVE-2022-22576/): Auth bypass in https://github.com/curl/curl (high 8.1)

---
From sbomify Insights: https://insights.sbomify.com/products/splunk/universal-forwarder/