CWE-1023.

Symfony: HtmlSanitizer Does Not URL-Sanitize srcset and imagesrcset: Media Scheme and Host Allow-List Bypass

• sensiolabs symfony
• CWE-184
• CWE-1023

Silent loss of messages when merging overlapping chat exports in whatstk

• lucasrodes whatstk
• CWE-1023

IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison (memcmp 12 bytes)

• PHP
• CWE-1023

Catalyst::Seal versions before 0.03 for Perl allow one request to disable a path or route a later one past an authorization check via a dispatch memo keyed on the request path alone

• CWE-706
• CWE-1023

Incorrect authorization in Eclipse Foundation Eclipse Ankaios

• Eclipse Foundation Eclipse Ankaios
• Broken access control
• CWE-1023

OpenClaw ClawScan Static Scanner static_scanner.go incomplete comparison with missing factors

• OpenClaw ClawScan
• CWE-1023

Visual Studio Code Security Feature Bypass Vulnerability

• Microsoft Visual Studio Code
• CWE-693
• CWE-1023

Session takeover via Auth Proxy cache key collision

• Grafana Enterprise
• Grafana OSS
• Authentication bypass
• Broken access control

cakephp/queue's Incomplete Comparison in getUniqueId vulnerable to collisions

• CWE-1023

>=0.1.10, <2.3.1 · fixed in 2.3.1

Laravel Backpack CRUD: Stored XSS in the color column — the `@if($column['escaped'])` branches are inverted

• Cross-site scripting (XSS)
• CWE-1023

>=6.0.0, <6.8.14 || >=7.0.0, <7.0.38 · fixed in 6.8.14, 7.0.38

NVIDIA Dynamo: NVIDIA Dynamo for Linux contains a vulnerability in the multimodal embedding cache…

• NVIDIA Dynamo
• CWE-1023

OpenClaw: Trusted retry endpoint checks could match hostname prefixes

• CWE-20
• CWE-345

<2026.5.7 · fixed in 2026.5.7

OpenClaw: Hostname checks could treat trailing-dot hosts inconsistently

• Server-side request forgery (SSRF)
• CWE-20

<2026.5.26 · fixed in 2026.5.26

Symfony: HtmlSanitizer UrlAttributeSanitizer Misses URL Attributes

• Cross-site scripting (XSS)
• CWE-1023

>=6.1.0, <6.4.41 || >=7.0.0, <7.4.13 || >=8.0.0, <8.0.13 · fixed in 6.4.41, 7.4.13, 8.0.13

Arista EOS Unexpected Tunnel Protocol Decapsulation and Forwarding Bypass

• Arista Networks EOS
• CWE-1023

Django: has_vary_header may expose cached responses when Vary values contain whitespace

• CWE-1023

<5.2.15 || >=6.0.0, <6.0.6 · fixed in 5.2.15, 6.0.6

pf silently ignores certain rules

• FreeBSD
• CWE-480
• CWE-754

jsrsasign: Incomplete Comparison Allows DSA Private Key Recovery via Biased Nonce Generation

• Weak cryptography or TLS
• CWE-1023

>=7.0.0, <11.1.1 · fixed in 11.1.1

BullWall Ransomware Containment incomplete file inspection

• BullWall Ransomware Containment
• CWE-1023

Windows BitLocker Security Feature Bypass Vulnerability

• Microsoft Windows 10 Version 1507
• Microsoft Windows 10 Version 1607
• CWE-1023

vLLM has a Weakness in MultiModalHasher Image Hashing Implementation

• CWE-1023
• CWE-1288

>=0.7.0, <0.9.0 · fixed in 0.9.0

Incomplete Comparison with Missing Factors in GitLab

• GitLab
• CWE-1023

An Incomplete Comparison with Missing Factors vulnerability in the Gallagher Controller allows an attacker to bypass PIV verification.

• Gallagher Command Center
• CWE-1023