Advisories · Weakness
CWE-179.
Every Advisory and CVE whose sources give the weakness CWE-179, newest first.
- CVSS 6.3 Medium
Apache Wicket: A component's markup is served as a package resource when its class name contains an underscore
- Apache Software Foundation Apache Wicket
- CWE-179
- CVSS 5.3 Medium
cosmicstack-labs mercury-agent Shell Command Execution permissions.ts checkShellCommand validate before canonicalize
- cosmicstack-labs mercury-agent
- CWE-179
- CWE-180
- CVSS 7.8 High
ASLR bypass for setuid executables via procctl(2)
- FreeBSD
- CWE-179
- CVSS 3.7 Low
Gnutls: gnutls: security bypass allows acceptance of revoked server certificates via crafted ocsp response
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- CWE-179
- CVSS 3.8 Low
Zio has SubFileSystem Path Confinement Bypass via Unresolved `..` Segment
- Path traversal
- CWE-179
<0.22.2 · fixed in 0.22.2
GHSA-h39g-6x3c-7fq9 - CVSS 7.8 High
Traefik has a Potential mTLS Bypass via Fragmented TLS ClientHello Causing Pre-SNI Sniff Fallback to Default Non-mTLS TLS Config in github.com/traefik/traefik
- Authentication bypass
- CWE-179
* · no fixed version yet
GHSA-wvvq-wgcr-9q48 · CVE-2026-32305 - CVSS 7.5 High
Fastify's Content-Type header tab character allows body validation bypass
- CWE-179
- CWE-436
<5.7.2 · fixed in 5.7.2
GHSA-jx2c-rxcm-jvmq · CVE-2026-25223 - CVSS 6.9 Medium
lockfile-lint-api Vulnerable to Incorrect Behavior Order
- CWE-179
<5.9.2 · fixed in 5.9.2
GHSA-7cfr-5cjf-32p4 · CVE-2025-4759 - CVSS 7.3 High
Password Policy Bypass Vulnerability
- SyroTech SY-GPON-1110-WDONT router
- CWE-179
- CVSS 8.8 High
An arbitrary file write vulnerability was found in GNU gzip's zgrep utility.
- gzip, xz-utils
- CWE-179