CVE-2021-23982 affects multiple packages. Using techniques that built on the slipstream research, a malicious webpage could have scanned both an internal network's hosts as well as services running on the user's local machine utilizing WebRTC connections. See references for individual vulnerability details.