# CWE-351. Every Advisory and CVE whose sources give the weakness CWE-351, newest first. ## Records, newest first - [TYPO3 CMS - Unrestricted File Upload in Form Framework](https://agentprime.io/advisories/GHSA-mfqj-cqv3-h7xw.md) `GHSA-mfqj-cqv3-h7xw`, `CVE-2026-15305`, `PKSA-d4vj-m6hn-xm1j` · Packagist `typo3/cms-form`: affected `>=14.2.0, <14.3.5`, fixed in `14.3.5` · CVSS 6.3 Medium · Not analysed yet · Published 31 Aug 2026 · Tags: CWE-351 - [Duplicate Advisory: TYPO3-CORE-SA-2026-020: TYPO3 CMS - Unrestricted File Upload in Form Framework](https://agentprime.io/advisories/GHSA-p8pr-442q-qf8g.md) `GHSA-p8pr-442q-qf8g` · Packagist `typo3/cms-form`: affected `>=14.2.0, <14.3.5`, fixed in `14.3.5` · CVSS 4.0, no score published · Withdrawn · Not analysed yet · Published 14 Jul 2026 · Tags: CWE-351 - [HCL BigFix RunBookAI is affected by a Unvalidated Command Input / Potential Command Smuggling vulnerability](https://agentprime.io/advisories/CVE-2025-31951.md) `CVE-2025-31951` · CVE record: HCL BigFix RunBookAI · CVSS 8.8 High · Not analysed yet · Published 6 May 2026 · Tags: Command injection, CWE-351, CWE-451 - [Duplicate Advisory: OpenClaw: Discord Component Interaction Misclassifies Group DM as Direct Message](https://agentprime.io/advisories/GHSA-pr66-whqj-rq5p.md) `GHSA-pr66-whqj-rq5p` · npm `openclaw`: affected `<2026.3.31`, fixed in `2026.3.31` · CVSS 5.4 Medium · Withdrawn · Not analysed yet · Published 24 Apr 2026 · Tags: CWE-351 - [OpenClaw: Discord Component Interaction Misclassifies Group DM as Direct Message](https://agentprime.io/advisories/GHSA-6336-qqw9-v6x6.md) `GHSA-6336-qqw9-v6x6`, `CVE-2026-41341` · npm `openclaw`: affected `<2026.3.31`, fixed in `2026.3.31` · CVSS 2.3 Low · Not analysed yet · Published 3 Apr 2026 · Tags: Broken access control, CWE-351 - [Contao is vulnerable to remote code execution in template closures](https://agentprime.io/advisories/GHSA-98vj-mm79-v77r.md) `GHSA-98vj-mm79-v77r`, `CVE-2025-65960`, `PKSA-wjhx-cdbz-9x61` · Packagist `contao/core-bundle`: affected `>=4.0.0, <4.13.57 || >=5.0.0-RC1, <5.3.42 || >=5.4.0-RC1, <5.6.5`, fixed in `4.13.57`, `5.3.42`, `5.6.5` · CVSS 6.6 Medium · Not analysed yet · Published 25 Nov 2025 · Tags: CWE-351 - [Skops may allow MethodNode to access unexpected object fields through dot notation, leading to arbitrary code execution at load time](https://agentprime.io/advisories/GHSA-4v6w-xpmh-gfgp.md) `GHSA-4v6w-xpmh-gfgp`, `CVE-2025-54413`, `PYSEC-2026-1926` · PyPI `skops`: affected `<0.12.0`, fixed in `0.12.0` · CVSS 8.7 High · Not analysed yet · Published 25 Jul 2025 · Tags: CWE-351 - [Skops has Inconsistent Trusted Type Validation that Enables Hidden \`operator\` Methods Execution](https://agentprime.io/advisories/GHSA-m7f4-hrc6-fwg3.md) `GHSA-m7f4-hrc6-fwg3`, `CVE-2025-54412`, `PYSEC-2026-1927` · PyPI `skops`: affected `<0.12.0`, fixed in `0.12.0` · CVSS 8.7 High · Not analysed yet · Published 25 Jul 2025 · Tags: CWE-351 - [TYPO3 Allows Unrestricted File Upload in File Abstraction Layer](https://agentprime.io/advisories/GHSA-9hq9-cr36-4wpj.md) `GHSA-9hq9-cr36-4wpj`, `CVE-2025-47939`, `PKSA-q3vc-nbpk-d1gk` · Packagist `typo3/cms-core`: affected `>=9.0.0, <9.5.51 || >=10.0.0, <10.4.50 || >=11.0.0, <11.5.44 || >=12.0.0, <12.4.31 || >=13.0.0, <13.4.12`, fixed in `9.5.51`, `10.4.50`, `11.5.44`, `12.4.31`, `13.4.12` · CVSS 5.4 Medium · Not analysed yet · Published 20 May 2025 · Tags: Unrestricted file upload, CWE-351 - [Growatt Cloud portal Insufficient Type Distinction](https://agentprime.io/advisories/CVE-2025-30510.md) `CVE-2025-30510` · CVE record: Growatt Cloud portal · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Apr 2025 · Tags: CWE-351 - [DNN does not check the contents of a file when uploading files](https://agentprime.io/advisories/CVE-2025-32035.md) `CVE-2025-32035` · CVE record: dnnsoftware Dnn.Platform · CVSS 2.6 Low · Not analysed yet · Published 8 Apr 2025 · Tags: CWE-351 - [Strawberry GraphQL has type resolution vulnerability in node interface that allows potential data leakage through incorrect type resolution](https://agentprime.io/advisories/GHSA-5xh2-23cc-5jc6.md) `GHSA-5xh2-23cc-5jc6`, `CVE-2025-22151`, `PYSEC-2026-1946` · PyPI `strawberry-graphql`: affected `>=0.182.0, <0.257.0`, fixed in `0.257.0` · CVSS 3.7 Low · Not analysed yet · Published 9 Jan 2025 · Tags: Memory corruption, CWE-351 - [IBM Cognos Controller file upload](https://agentprime.io/advisories/CVE-2024-45676.md) `CVE-2024-45676` · CVE record: IBM Cognos Controller · CVSS 4.3 Medium · Not analysed yet · Published 3 Dec 2024 · Tags: CWE-351 - [Mozilla Firefox: When importing resources using Web Workers…](https://agentprime.io/advisories/CVE-2024-4769.md) `CVE-2024-4769` · CVE record: Mozilla Firefox and 2 more · CVSS 5.9 Medium · Not analysed yet · Published 14 May 2024 · Tags: CWE-351 - [RARLAB WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a benign file within a ZIP archive.](https://agentprime.io/advisories/CVE-2023-38831.md) `CVE-2023-38831` · CVE record · CVSS 7.8 High · Critical (KEV, CVSS 7+ and EPSS) · In CISA KEV, ransomware · EPSS 1.00 · Not analysed yet · Published 23 Aug 2023 · Tags: CWE-351 - [Advantech WebAccess Insufficient Type Distinction](https://agentprime.io/advisories/CVE-2023-2866.md) `CVE-2023-2866` · CVE record: Advantech WebAccess/SCADA · CVSS 7.3 High · Not analysed yet · Published 7 Jun 2023 · Tags: CWE-351 - [Incorrect type conversion in Swift Project Swift Corelib-Foundation](https://agentprime.io/advisories/CVE-2022-1642.md) `CVE-2022-1642` · CVE record: Swift Project Swift Corelib-Foundation · No CVSS score · Not analysed yet · Published 16 Jun 2022 · Tags: CWE-241, CWE-351, CWE-704 - [Bluetooth devices supporting LE and specific BR/EDR implementations are vulnerable to method confusion attacks](https://agentprime.io/advisories/CVE-2020-10134.md) `CVE-2020-10134` · CVE record: Bluetooth LE · CVSS 6.3 Medium · Not analysed yet · Published 19 May 2020 · Tags: CWE-351 ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .