CWE-625

In JetBrains Junie CLI before 26.8.24 command execution was possible via the Allow Similar Commands option

JetBrains · Junie CLI

Wails: wildcardPatternToRegex allows Origin bypass via suffix match in BindingsAllowedOrigins

wailsapp · wails

CGI versions before 5.00 for Perl allow denial of service via submitted values used as a regex for optgroup selection in scrolling_list

CGI

CGI::Cookie versions from 4.67 before 5.00 for Perl allow denial of service via the client cookie expires value used as a regex in parse

CGI

CallBackery versions before 0.62.0 for Perl accept unintended values in form fields checked by createRxValidator

CallBackery

Permissive Regular Expression in GitLab

GitLab · GitLab

Astro: Netlify Image CDN allowlist bypass enables SSRF

withastro · astro

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an External Control of Critical State…

Dell · Secure Connect Gateway 5.0 - Application

xmldom: requireWellFormed DocType publicId/systemId validation is bypassable via an embedded line terminator

xmldom · xmldom

xmldom: requireWellFormed element/attribute name validation is bypassable via an embedded line terminator

xmldom · xmldom