Security Cve

{
  "exampleTruncated": true,
  "fixedSubject": "CVE-2021-44228",
  "report": {
    "description": "Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An attacker who can control log messages or log message p",
    "id": "CVE-2021-44228",
    "limitations": "NVD record lookup, not a system scan. Scores may change; missing metrics do not imply low risk. References capped at 30. This product uses data from the NVD API but is not endorsed or certified by the NVD.",
    "metrics": [
      {
        "score": 10,
        "severity": "CRITICAL",
        "source": "[email protected]",
        "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
        "version": "3.1"
      }
    ],
    "modified": "2026-08-11T19:33:44.513",
    "published": "2021-12-10T10:15:09.143",
    "references": [
      {
        "tags": [
          "Third Party Advisory"
        ],
        "url": "http://packetstormsecurity.com/files/165225/Apache-Log4j2-2.14.1-Remote-Code-Execution.html"
      }
    ],
    "status": "Analyzed",
    "weaknesses": [
      "CWE-20"
    ]
  },
  "retrievedAt": "2026-09-18T13:57:08.759Z",
  "sample": true,
  "service": "cve",
  "source": {
    "name": "NIST National Vulnerability Database",
    "url": "https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2021-44228"
  },
  "subject": "CVE-2021-44228"
}

# bash or zsh: see the payment challenge. Nothing is charged.
curl -sS -g -i 'https://saylorinnovations.com/api/security/cve?cve=CVE-2021-44228'

# x402 v2 sends the challenge base64-encoded in the PAYMENT-REQUIRED header (v1 sends it in the body).
# To read the header:
curl -sS -g -o /dev/null -D - 'https://saylorinnovations.com/api/security/cve?cve=CVE-2021-44228' \
  | grep -i '^payment-required:' | cut -d' ' -f2 | tr -d '\r' | base64 --decode

// npm i @x402/fetch @x402/evm viem
import { wrapFetchWithPayment, x402Client } from "@x402/fetch";
import { registerExactEvmScheme } from "@x402/evm/exact/client";
import { privateKeyToAccount } from "viem/accounts";

// Pays at most $0.01 per call.
const client = new x402Client().setSpendControls({ maxAmountPerPayment: "$0.01" });
registerExactEvmScheme(client, { signer: privateKeyToAccount(process.env.EVM_PRIVATE_KEY) });
const pay = wrapFetchWithPayment(fetch, client);

// Not sure it's safe to pay? ToolVet checks it first for $0.005. Pay for that from a separate
// client: this one is capped at $0.01 per payment. GET https://toolvet.app/api/v1/check?url=https%3A%2F%2Fsaylorinnovations.com%2Fapi%2Fsecurity%2Fcve
const res = await pay("https://saylorinnovations.com/api/security/cve?cve=CVE-2021-44228");
console.log(res.status, await res.text());

# pip install "x402[requests,evm]"
import os
from eth_account import Account
from x402 import x402ClientSync
from x402.http.clients import x402_requests
from x402.mechanisms.evm import EthAccountSigner
from x402.mechanisms.evm.exact.register import register_exact_evm_client

# Pays at most $0.01 per call.
client = x402ClientSync().set_spend_controls({"max_amount_per_payment": "$0.01"})
register_exact_evm_client(client, EthAccountSigner(Account.from_key(os.environ["EVM_PRIVATE_KEY"])))

with x402_requests(client) as session:
    res = session.get("https://saylorinnovations.com/api/security/cve?cve=CVE-2021-44228")
    print(res.status_code, res.text)