Advisories · Weakness
CWE-186.
Every Advisory and CVE whose sources give the weakness CWE-186, newest first.
- CVSS 5.3 Medium
Symfony: HtmlSanitizer MetaRefreshAttributeSanitizer Matches Only a Narrow Subset of the Browser Refresh Grammar (Incomplete Fix for CVE-2026-48761)
- sensiolabs symfony
- Open redirect
- CWE-186
- CVSS 2.1 Low
Net::IMAP: Denial of Service via incomplete raw argument validation
- CWE-162
- CWE-182
<0.5.15 || >=0.6.0, <0.6.4.1 · fixed in 0.5.15, 0.6.4.1
GHSA-c4fp-cxrr-mj66 · CVE-2026-47241 - CVSS 5.3 Medium
Envoy vulnerable to bypass of RBAC uri_template permission
- envoy
- CWE-186