CVE-2021-23521

CVE-2021-23521 is a high-severity vulnerability affecting the juce-framework/JUCE package prior to version 6.1.5. It allows an attacker to write arbitrary files outside the intended extraction directory by crafting a malicious archive containing a symbolic link, potentially leading to arbitrary code execution. With a CVSS score of 7.8, this local attack requires low privileges and complexity, and can result in high impact to confidentiality, integrity, and availability. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.