CWE-212

CVEs per yearBy the year they were published

1. 20031
2. 20051
3. 20121
4. 20184
5. 20193
6. 202013
7. 202110
8. 202228
9. 20236
10. 202410
11. 202519
12. 202645

Newest CVEs

• CVE-2026-12735

  IBM Controller Disclosure Management has addressed vulnerabilities

  IBM · Controller Disclosure Management

  Medium4.3
• CVE-2026-123609

  Rustls before 0.23.46 and 0.24.0-dev.1 before 0.24.0-dev.2 Secret Exposure via Debug

  rustls · rustls

  Medium4.1
• CVE-2026-120415

  undici vulnerable to cross-origin credential disclosure via array-of-tuples headers bypassing redirect stripping

  undici · undici

  Medium5.9
• CVE-2026-118996

  CallBackery versions before 0.62.0 for Perl send users their own password hash and the admin-only user note via getUserConfig

  CallBackery

  Medium4.9
• CVE-2026-115363

  OpenBao 2.2.0 before 2.6.4 and 2.7.0 before 2.7.1 ACME EAB MAC Key Disclosure via Sanitized Configuration

  openbao · openbao

  Low2.1
• CVE-2026-111756

  follow-redirects array-form headers bypass cross-origin credential stripping

  follow-redirects · follow-redirects

  High8.2
• CVE-2026-111387

  Nezha 2.2.5 before 2.3.15 Information Disclosure via DDNS List Endpoint

  nezhahq · nezha

  High7.1
• CVE-2026-107293

  Pydantic AI OpenTelemetry instrumentation: retry prompt content is not redacted when `include_content=False`

  pydantic · pydantic-ai

  Low2.3
• CVE-2026-107291

  Pydantic AI OpenTelemetry instrumentation: exception events on tool and agent run spans include content when `include_content=False`

  pydantic · pydantic-ai

  Low2.3
• CVE-2026-96879

  "Checked by" label in page history should not be shown if the underlying review log entry is suppressed"

  The Wikimedia Foundation · Mediawiki - FlaggedRevs extension

  Medium6.9

Vendors it comes up for most

1. IBM5
2. Red Hat5
3. AMD3
4. GitLab3
5. Microsoft3
6. argoproj3
7. follow-redirects3
8. guzzle3
9. nextcloud3
10. Apache Software Foundation2