Advisories · Weakness
CWE-147.
Every Advisory and CVE whose sources give the weakness CWE-147, newest first.
- CVSS 6.9 Medium
json-smart through 2.6.0 Strict-Mode Validation Bypass via 0x1A Character
- json-smart
- CWE-147
- CVSS 9.8 CriticalCritical · CVSS 9+
CVE-2026-82989
- Viewsonic vCast
- Other injection
- CWE-147
- CVSS 6.0 Medium
Jakarta Mail vulnerable to SMTP Injection
- CWE-147
<1.6.8 || >=2.0.0, <2.0.2 · fixed in 1.6.8, 2.0.2
GHSA-9342-92gg-6v29 · CVE-2025-7962 - CVSS 2.1 Low
Git does not sanitize URLs when asking for credentials interactively
- git
- CWE-116
- CWE-147
- CVSS 2.1 Low
Newline confusion in credential helpers can lead to credential exfiltration in git
- git
- CWE-116
- CWE-147
- CVSS 5.4 Medium
matrix-appservice-irc allows IRC Command injection in provisioning API
- matrix-org matrix-appservice-irc
- CWE-147
- CVSS 5.4 Medium
HTML and SMTP Injection in LiquidFiles
- LiquidFiles
- CWE-116
- CWE-147
- CVSS 9.8 CriticalCritical · CVSS 9+
SMTP command injection in lettre
- CWE-147
>=0.7.0, <0.9.6 · fixed in 0.9.6
GHSA-qc36-q22q-cjw3 · CVE-2021-38189