CWE-524
97 published CVEs are weaknesses of this kind, as the records or NVD name it.
- 97Published CVEs97 of them scored
- 72Last 12 monthspublished in the last year
- 2Critical24 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-123041
The request-callout plugin in Kong Gateway Enterprise and Kong AI Gateway omits callout headers not sent by the client from its cache key, allowing a cached…
Kong Inc. · Kong Gateway Enterprise
High8.2 - CVE-2026-92443
The caching plugins in Kong Gateway Enterprise and Kong AI Gateway may serve a response cached for a request carrying an Authorization or Proxy-Authorization…
Kong Inc. · Kong Gateway Enterprise
High8.2 - CVE-2026-92442
The graphql-proxy-cache-advanced plugin in Kong Gateway Enterprise omits the caller's identity from the cache key, allowing a response cached for one caller to…
Kong Inc. · Kong Gateway Enterprise
High8.3 - CVE-2026-92545
The proxy-cache and proxy-cache-advanced plugins in Kong Gateway Enterprise and Kong AI Gateway omit the request hostname from the cache key which may allow a…
Kong Inc. · Kong Gateway Enterprise
High8.7 - CVE-2026-119743
pdfmake < 0.3.14 Shared Cache Access Policy Bypass
bpampuch · pdfmake
Medium6.3 - CVE-2026-116630
undici vulnerable to cross-user information disclosure via cross-origin redirect revalidation
undici · undici
Medium5.9 - CVE-2026-116592
undici vulnerable to cache poisoning and cross-user disclosure via intermediate redirect hops
undici · undici
High7.4 - CVE-2026-120474
undici vulnerable to cross-user cache disclosure via same-origin redirect
undici · undici
Medium6.5 - CVE-2026-115710
Use of Cache Containing Sensitive Information in Elasticsearch Leading to Information Disclosure
Elastic · Elasticsearch
Medium4.2 - CVE-2026-113593
Potential exposure of private data via empty and missing Vary headers
djangoproject · Django
Low2.3