0.8.4

DATE	CVE	VULNERABILITY TITLE	RISK
2021-05-25	CVE-2021-27821	Cross-site Scripting vulnerability in Openwrt Luci The Web Interface for OpenWRT LuCI version 19.07 and lower has been discovered to have a cross-site scripting vulnerability which can lead to attackers carrying out arbitrary code execution. network openwrt CWE-79	4.3
2019-05-23	CVE-2019-12272	OS Command Injection vulnerability in Openwrt Luci In OpenWrt LuCI through 0.10, the endpoints admin/status/realtime/bandwidth_status and admin/status/realtime/wireless_status of the web application are affected by a command injection vulnerability. network low complexity openwrt CWE-78	7.5