CWE-117
143 published CVEs are weaknesses of this kind, as the records or NVD name it.
- 143Published CVEs143 of them scored
- 61Last 12 monthspublished in the last year
- 9Critical20 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-125125
compose-lint: A symlink in a pull request can issue workflow commands through the compose-lint Action's SARIF-directory error message
tmatens · compose-lint
Low2.3 - CVE-2026-125124
compose-lint: Text in a pull request can reach Azure Pipelines as logging commands through compose-lint 0.31.0's output
tmatens · compose-lint
Low2.3 - CVE-2026-125123
compose-lint: A file path in a pull request can issue CI workflow commands through compose-lint 0.31.0's command-line error messages
tmatens · compose-lint
Low2.3 - CVE-2026-125122
compose-lint: Text in a pull request can issue CI workflow commands through compose-lint 0.31.0's JSON and SARIF output on stdout
tmatens · compose-lint
Low2.3 - CVE-2026-125121
compose-lint: Text in a pull request can still issue CI workflow commands through compose-lint 0.31.0's output
tmatens · compose-lint
Medium5.3 - CVE-2026-63287
It was possible for an authenticated non-admin user to modify certain data objects without having the appropriate permissions, which could be used to tamper…
Axis Communications AB · AXIS Camera Station Pro
Medium6.5 - CVE-2026-123369
compose-lint: Compose file text can issue GitHub Actions workflow commands through the compose-lint Action
tmatens · compose-lint
Medium5.3 - CVE-2026-17377
Multiple Vulnerabilities in IBM API Connect
IBM · API Connect
Medium5.0 - CVE-2026-103864
Apache Sling Engine: Request-derived values reach log sinks without CR/LF neutralization
Apache Software Foundation · Apache Sling Engine
High7.5 - CVE-2026-95769
Unauthenticated Audit Log Spoofing in API of HPE Networking Fabric Composer
Hewlett Packard Enterprise (HPE) · Fabric Composer
Medium5.3