# CWE-436.

Every Advisory and CVE whose sources give the weakness CWE-436, newest first.

## Records, newest first (an older page)

- [@fastify/express has a middleware authentication bypass via URL normalization gaps (duplicate slashes and semicolons)](https://agentprime.io/advisories/GHSA-6hw5-45gm-fj88.md)
  `GHSA-6hw5-45gm-fj88`, `CVE-2026-33808` · npm `@fastify/express`: affected `<4.0.5`, fixed in `4.0.5` · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Apr 2026 · Tags: CWE-436
- [@fastify/express's middleware path doubling causes authentication bypass in child plugin scopes](https://agentprime.io/advisories/GHSA-hrwm-hgmj-7p9c.md)
  `GHSA-hrwm-hgmj-7p9c`, `CVE-2026-33807` · npm `@fastify/express`: affected `<4.0.5`, fixed in `4.0.5` · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Apr 2026 · Tags: CWE-436
- [Multiple security fixes in justhtml](https://agentprime.io/advisories/GHSA-4p64-v8f5-r2gx.md)
  `GHSA-4p64-v8f5-r2gx`, `CVE-2026-7808` · PyPI `justhtml`: affected `<1.16.0`, fixed in `1.16.0` · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Apr 2026 · Tags: Cross-site scripting (XSS), CWE-20, CWE-178, CWE-436
- [Parse Server: File upload Content-Type override via extension mismatch](https://agentprime.io/advisories/GHSA-vr5f-2r24-w5hc.md)
  `GHSA-vr5f-2r24-w5hc`, `BIT-parse-2026-35200`, `CVE-2026-35200` · npm `parse-server`: affected `<8.6.73 || >=9.0.0, <9.7.1-alpha.4`, fixed in `8.6.73`, `9.7.1-alpha.4` · CVSS 2.1 Low · Not analysed yet · Published 4 Apr 2026 · Tags: CWE-436
- [OpenClaw: Tlon Startup Migration Rehydrates Empty-Array Revocations From File Config](https://agentprime.io/advisories/GHSA-3pm9-5j7m-59vc.md)
  `GHSA-3pm9-5j7m-59vc`, `CVE-2026-41388` · npm `openclaw`: affected `<2026.3.31`, fixed in `2026.3.31` · CVSS 6.3 Medium · Not analysed yet · Published 3 Apr 2026 · Tags: CWE-372, CWE-436
- [Rack: Forwarded Header semicolon injection enables Host and Scheme spoofing](https://agentprime.io/advisories/GHSA-qfgr-crr9-7r49.md)
  `GHSA-qfgr-crr9-7r49`, `CVE-2026-32762` · RubyGems `rack`: affected `>=3.0.0.beta1, <3.1.21 || >=3.2.0, <3.2.6`, fixed in `3.1.21`, `3.2.6` · CVSS 4.8 Medium · Not analysed yet · Published 2 Apr 2026 · Tags: CWE-436
- [Rack's greedy multipart boundary parsing can cause parser differentials and WAF bypass.](https://agentprime.io/advisories/GHSA-vgpv-f759-9wx3.md)
  `GHSA-vgpv-f759-9wx3`, `CVE-2026-26961` · RubyGems `rack`: affected `<2.2.23 || >=3.0.0.beta1, <3.1.21 || >=3.2.0, <3.2.6`, fixed in `2.2.23`, `3.1.21`, `3.2.6` · CVSS 3.7 Low · Not analysed yet · Published 2 Apr 2026 · Tags: CWE-436
- [Duplicate Advisory: OpenClaw: system.run approval identity mismatch could execute a different binary than displayed](https://agentprime.io/advisories/GHSA-mxmg-3p7m-2ghr.md)
  `GHSA-mxmg-3p7m-2ghr` · npm `openclaw`: affected `<=2026.2.24`, no fixed version yet · CVSS 4.8 Medium · Withdrawn · Not analysed yet · Published 21 Mar 2026 · Tags: CWE-436
- [Duplicate Advisory: OpenClaw's system.run shell-wrapper positional argv carriers could execute hidden commands under misleading approval text](https://agentprime.io/advisories/GHSA-w6f4-3v35-qjhj.md)
  `GHSA-w6f4-3v35-qjhj` · npm `openclaw`: affected `<=2026.2.23`, no fixed version yet · CVSS 6.4 Medium · Withdrawn · Not analysed yet · Published 21 Mar 2026 · Tags: Command injection, CWE-436
- [Improper handling of null Unicode character when parsing JSON in github.com/modelcontextprotocol/go-sdk](https://agentprime.io/advisories/GHSA-q382-vc8q-7jhj.md)
  `GHSA-q382-vc8q-7jhj`, `GO-2026-4770` · Go `github.com/modelcontextprotocol/go-sdk`: affected `<1.4.1`, fixed in `1.4.1` · CVSS 4.0, no score published · Not analysed yet · Published 19 Mar 2026 · Tags: CWE-436, CWE-1395
- [astral-tokio-tar insufficiently validates PAX extensions during extraction](https://agentprime.io/advisories/GHSA-6gx3-4362-rf54.md)
  `GHSA-6gx3-4362-rf54`, `CVE-2026-32766`, `RUSTSEC-2026-0066` · crates.io `astral-tokio-tar`: affected `<0.6.0`, fixed in `0.6.0` · CVSS 1.7 Low · Not analysed yet · Published 17 Mar 2026 · Tags: CWE-436
- [OpenClaw: Node-host approvals could show misleading shell payloads instead of the executed argv](https://agentprime.io/advisories/GHSA-rw39-5899-8mxp.md)
  `GHSA-rw39-5899-8mxp`, `CVE-2026-32971` · npm `openclaw`: affected `<2026.3.11`, fixed in `2026.3.11` · CVSS 7.3 High · Not analysed yet · Published 13 Mar 2026 · Tags: Broken access control, CWE-436, CWE-451
- [OpenClaw: system.run allow-always persistence included shell-commented payload tails](https://agentprime.io/advisories/GHSA-9q2p-vc84-2rwm.md)
  `GHSA-9q2p-vc84-2rwm` · npm `openclaw`: affected `<2026.3.7`, fixed in `2026.3.7` · CVSS 5.0 Medium · Not analysed yet · Published 9 Mar 2026 · Tags: Broken access control, CWE-436
- [OpenClaw: system.run wrapper-depth boundary could skip shell approval gating](https://agentprime.io/advisories/GHSA-r6qf-8968-wj9q.md)
  `GHSA-r6qf-8968-wj9q`, `CVE-2026-27183` · npm `openclaw`: affected `<2026.3.7`, fixed in `2026.3.7` · CVSS 2.1 Low · Not analysed yet · Published 9 Mar 2026 · Tags: Broken access control, CWE-436
- [Header Email Address Parsing](https://agentprime.io/advisories/CVE-2026-27444.md)
  `CVE-2026-27444` · CVE record: SEPPmail Secure Email Gateway · CVSS 7.8 High · Not analysed yet · Published 4 Mar 2026 · Tags: CWE-436
- [OpenClaw has exec allowlist/safeBins policy-runtime mismatch via env -S wrapper interpretation](https://agentprime.io/advisories/GHSA-796m-2973-wc5q.md)
  `GHSA-796m-2973-wc5q` · npm `openclaw`: affected `<2026.2.23`, fixed in `2026.2.23` · CVSS 4.0, no score published · Not analysed yet · Published 3 Mar 2026 · Tags: CWE-436
- [OpenClaw's system.run shell-wrapper positional argv carriers could execute hidden commands under misleading approval text](https://agentprime.io/advisories/GHSA-6rcp-vxwf-3mfp.md)
  `GHSA-6rcp-vxwf-3mfp`, `CVE-2026-32052` · npm `openclaw`: affected `<2026.2.24`, fixed in `2026.2.24` · CVSS 5.8 Medium · Not analysed yet · Published 3 Mar 2026 · Tags: Broken access control, CWE-436
- [OpenClaw: system.run approval identity mismatch could execute a different binary than displayed](https://agentprime.io/advisories/GHSA-hwpq-rrpf-pgcq.md)
  `GHSA-hwpq-rrpf-pgcq`, `CVE-2026-32065` · npm `openclaw`: affected `<2026.2.25`, fixed in `2026.2.25` · CVSS 5.7 Medium · Not analysed yet · Published 2 Mar 2026 · Tags: Broken access control, CWE-436
- [OpenClaw: Unicode canonicalization drift in node metadata policy classification could broaden node allowlists](https://agentprime.io/advisories/GHSA-392f-ggf5-fp3c.md)
  `GHSA-392f-ggf5-fp3c` · npm `openclaw`: affected `<2026.3.1`, fixed in `2026.3.1` · CVSS 4.0, no score published · Not analysed yet · Published 2 Mar 2026 · Tags: CWE-176, CWE-436
- [MCP Go SDK Vulnerable to Improper Handling of Case Sensitivity](https://agentprime.io/advisories/GHSA-wvj2-96wp-fq3f.md)
  `GHSA-wvj2-96wp-fq3f`, `CVE-2026-27896`, `GO-2026-4569` · Go `github.com/modelcontextprotocol/go-sdk`: affected `<1.3.1`, fixed in `1.3.1` · CVSS 7.0 High · Not analysed yet · Published 26 Feb 2026 · Tags: CWE-178, CWE-436
- [Fickling: OBJ opcode call invisibility bypasses all safety checks](https://agentprime.io/advisories/GHSA-mxhj-88fx-4pcv.md)
  `GHSA-mxhj-88fx-4pcv` · PyPI `fickling`: affected `<0.1.8`, fixed in `0.1.8` · CVSS 4.0, no score published · Not analysed yet · Published 24 Feb 2026 · Tags: CWE-436
- [Interpretation Conflict in GitLab](https://agentprime.io/advisories/CVE-2026-0958.md)
  `CVE-2026-0958` · CVE record: GitLab GitLab · CVSS 7.5 High · Not analysed yet · Published 11 Feb 2026 · Tags: CWE-436
- [Fastify's Content-Type header tab character allows body validation bypass](https://agentprime.io/advisories/GHSA-jx2c-rxcm-jvmq.md)
  `GHSA-jx2c-rxcm-jvmq`, `CVE-2026-25223` · npm `fastify`: affected `<5.7.2`, fixed in `5.7.2` · CVSS 7.5 High · Not analysed yet · Published 2 Feb 2026 · Tags: CWE-179, CWE-436
- [Path Normalization Bypass in Traefik Router + Middleware Rules](https://agentprime.io/advisories/GHSA-gm3x-23wp-hc2c.md)
  `GHSA-gm3x-23wp-hc2c`, `CVE-2025-66490`, `GO-2025-4206` · Go `github.com/traefik/traefik` and 2 more: affected `<=1.7.34`, no fixed version yet · CVSS 6.9 Medium · Not analysed yet · Published 8 Dec 2025 · Tags: CWE-436
- [node-forge has an Interpretation Conflict vulnerability via its ASN.1 Validator Desynchronization](https://agentprime.io/advisories/GHSA-5gfm-wpxj-wjgq.md)
  `GHSA-5gfm-wpxj-wjgq`, `CVE-2025-12816` · npm `node-forge`: affected `<1.3.2`, fixed in `1.3.2` · CVSS 8.6 High · Not analysed yet · Published 26 Nov 2025 · Tags: CWE-436
- [Duplicate Advisory: Nodemailer: Email to an unintended domain can occur due to Interpretation Conflict](https://agentprime.io/advisories/GHSA-jj37-3377-m6vv.md)
  `GHSA-jj37-3377-m6vv` · npm `nodemailer`: affected `<7.0.7`, fixed in `7.0.7` · CVSS 7.5 High · Withdrawn · Not analysed yet · Published 14 Nov 2025 · Tags: CWE-436, CWE-1286
- [Nodemailer: Email to an unintended domain can occur due to Interpretation Conflict](https://agentprime.io/advisories/GHSA-mm7p-fcc7-pg87.md)
  `GHSA-mm7p-fcc7-pg87`, `CVE-2025-13033` · npm `nodemailer`: affected `<7.0.7`, fixed in `7.0.7` · CVSS 7.5 High · Not analysed yet · Published 7 Oct 2025 · Tags: CWE-20, CWE-436, CWE-1286
- [uv allows ZIP payload obfuscation through parsing differentials](https://agentprime.io/advisories/GHSA-8qf3-x8v5-2pj8.md)
  `GHSA-8qf3-x8v5-2pj8`, `CVE-2025-54368`, `PYSEC-2026-2001` · PyPI `uv`: affected `<0.8.6`, fixed in `0.8.6` · CVSS 6.8 Medium · Not analysed yet · Published 7 Aug 2025 · Tags: CWE-20, CWE-436
- [Git allows arbitrary code execution through broken config quoting](https://agentprime.io/advisories/CVE-2025-48384.md)
  `CVE-2025-48384` · CVE record: git git · CVSS 8.1 High · Critical (KEV) · In CISA KEV · Not analysed yet · Published 8 Jul 2025 · Tags: Path traversal, CWE-436
- [Ruby SAML allows a SAML authentication bypass due to namespace handling (parser differential)](https://agentprime.io/advisories/GHSA-754f-8gm6-c4r2.md)
  `GHSA-754f-8gm6-c4r2`, `BIT-gitlab-2025-25292`, `CVE-2025-25292` · RubyGems `ruby-saml`: affected `<1.12.4 || >=1.13.0, <1.18.0`, fixed in `1.12.4`, `1.18.0` · CVSS 9.3 Critical · Critical (CVSS 9+, CVSS 7+ and EPSS) · EPSS 0.65 · Not analysed yet · Published 12 Mar 2025 · Tags: Weak cryptography or TLS, CWE-436
- [Ruby SAML allows a SAML authentication bypass due to DOCTYPE handling (parser differential)](https://agentprime.io/advisories/GHSA-4vc4-m8qh-g8jm.md)
  `GHSA-4vc4-m8qh-g8jm`, `BIT-gitlab-2025-25291`, `CVE-2025-25291` · RubyGems `ruby-saml`: affected `<1.12.4 || >=1.13.0, <1.18.0`, fixed in `1.12.4`, `1.18.0` · CVSS 9.3 Critical · Critical (CVSS 9+, CVSS 7+ and EPSS) · EPSS 0.21 · Not analysed yet · Published 12 Mar 2025 · Tags: Weak cryptography or TLS, CWE-436
- [Missing validation of header name and value in codeigniter4/framework](https://agentprime.io/advisories/GHSA-x5mq-jjr3-vmx6.md)
  `GHSA-x5mq-jjr3-vmx6`, `CVE-2025-24013`, `PKSA-qbjf-dc24-wrff` · Packagist `codeigniter4/framework`: affected `<4.5.8`, fixed in `4.5.8` · CVSS 5.3 Medium · Not analysed yet · Published 21 Jan 2025 · Tags: CWE-436
- [Git Credential Manager carriage-return character in remote URL allows malicious repository to leak credentials](https://agentprime.io/advisories/GHSA-86c2-4x57-wc8g.md)
  `GHSA-86c2-4x57-wc8g`, `CVE-2024-50338` · NuGet `git-credential-manager`: affected `<2.6.1`, fixed in `2.6.1` · CVSS 7.4 High · Not analysed yet · Published 14 Jan 2025 · Tags: Information disclosure, CWE-436
- [Gateway API route matching order contradicts specification](https://agentprime.io/advisories/GHSA-qcm3-7879-xcww.md)
  `GHSA-qcm3-7879-xcww`, `BIT-cilium-2024-42487`, `BIT-cilium-operator-2024-42487`, `BIT-hubble-relay-2024-42487`, `CVE-2024-42487`, `GO-2024-3071` · Go `github.com/cilium/cilium`: affected `>=1.15.0, <1.15.8 || >=1.16.0, <1.16.1`, fixed in `1.15.8`, `1.16.1` · CVSS 4.0 Medium · Not analysed yet · Published 15 Aug 2024 · Tags: Other injection, CWE-436
- [OpenStack Nova vulnerable to unauthorized access to potentially sensitive data](https://agentprime.io/advisories/GHSA-rm86-h44c-2r2m.md)
  `GHSA-rm86-h44c-2r2m`, `CVE-2024-40767`, `PYSEC-2026-1709` · PyPI `nova`: affected `<=27.4.0 || >=28.0.0, <=28.2.0 || >=29.0.0, <=29.1.0`, no fixed version yet · CVSS 6.5 Medium · Not analysed yet · Published 24 Jul 2024 · Tags: Information disclosure, CWE-436
- [Name confusion in x509 Subject Alternative Name fields](https://agentprime.io/advisories/GHSA-ff7q-6vwh-v9m4.md)
  `GHSA-ff7q-6vwh-v9m4`, `CVE-2023-52892`, `PKSA-4p7m-np8m-fq35` · Packagist `phpseclib/phpseclib`: affected `<1.0.22 || >=2.0.0, <2.0.46 || >=3.0.0, <3.0.33`, fixed in `1.0.22`, `2.0.46`, `3.0.33` · CVSS 7.5 High · Not analysed yet · Published 28 Jun 2024 · Tags: CWE-436
- [url.c in GNU Wget through 1.24.5 mishandles semicolons in the userinfo subcomponent of a URI, and thus there may be insecure behavior in which data that was supposed to be in the userinfo subcomponen…](https://agentprime.io/advisories/CVE-2024-38428.md)
  `CVE-2024-38428` · CVE record · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Jun 2024 · Tags: CWE-436
- [Cisco Adaptive Security Appliance (ASA) Software: A vulnerability in the activation of an access control list (ACL) on Cisco Adaptive…](https://agentprime.io/advisories/CVE-2024-20293.md)
  `CVE-2024-20293` · CVE record: Cisco Cisco Adaptive Security Appliance (ASA) Software and 1 more · CVSS 5.8 Medium · Not analysed yet · Published 22 May 2024 · Tags: CWE-436
- [btcd susceptible to consensus failures](https://agentprime.io/advisories/GHSA-3jgf-r68h-xfqm.md)
  `GHSA-3jgf-r68h-xfqm`, `CVE-2024-34478`, `GO-2024-2818` · Go `github.com/btcsuite/btcd`: affected `<0.24.0`, fixed in `0.24.0` · CVSS 7.5 High · Not analysed yet · Published 5 May 2024 · Tags: CWE-436
- [Softing Secure Integration Server Interpretation Conflict Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2023-39481.md)
  `CVE-2023-39481` · CVE record: Softing Secure Integration Server · CVSS 6.6 Medium · Not analysed yet · Published 3 May 2024 · Tags: CWE-436
- [PAN-OS: Predefined Decryption Exclusions Does Not Work as Intended](https://agentprime.io/advisories/CVE-2024-3386.md)
  `CVE-2024-3386` · CVE record: Palo Alto Networks PAN-OS and 2 more · CVSS 5.3 Medium · Not analysed yet · Published 10 Apr 2024 · Tags: CWE-436
- [HCL BigFix Platform is susceptible to a Denial of Service attack](https://agentprime.io/advisories/CVE-2023-45715.md)
  `CVE-2023-45715` · CVE record: HCL Software BigFix Platform · CVSS 3.5 Low · Not analysed yet · Published 28 Mar 2024 · Tags: CWE-436
- [Usage of disabled protocol](https://agentprime.io/advisories/CVE-2024-2004.md)
  `CVE-2024-2004` · CVE record: curl curl · CVSS 3.5 Low · Not analysed yet · Published 27 Mar 2024 · Tags: CWE-436
- [CarrierWave content-Type allowlist bypass vulnerability which possibly leads to XSS remained](https://agentprime.io/advisories/GHSA-vfmv-jfc5-pjjw.md)
  `GHSA-vfmv-jfc5-pjjw`, `CVE-2024-29034` · RubyGems `carrierwave`: affected `<2.2.6 || >=3.0.0, <3.0.7`, fixed in `2.2.6`, `3.0.7` · CVSS 6.8 Medium · Not analysed yet · Published 25 Mar 2024 · Tags: Cross-site scripting (XSS), CWE-436
- [Amavis before 2.12.3 and 2.13.x before 2.13.1, in part because of its use of MIME-tools, has an Interpretation Conflict (relative to some mail user agents) when there are multiple boundary parameters…](https://agentprime.io/advisories/CVE-2024-28054.md)
  `CVE-2024-28054` · CVE record · CVSS 7.4 High · Not analysed yet · Published 18 Mar 2024 · Tags: CWE-436
- [Bref vulnerable to Body Parsing Inconsistency in Event-Driven Functions](https://agentprime.io/advisories/GHSA-82vx-mm6r-gg8w.md)
  `GHSA-82vx-mm6r-gg8w`, `CVE-2024-24754`, `PKSA-f29r-hw5p-d3rv` · Packagist `bref/bref`: affected `<2.1.13`, fixed in `2.1.13` · CVSS 3.7 Low · Not analysed yet · Published 1 Feb 2024 · Tags: CWE-436
- [Bref Doesn't Support Multiple Value Headers in ApiGatewayFormatV2](https://agentprime.io/advisories/GHSA-99f9-gv72-fw9r.md)
  `GHSA-99f9-gv72-fw9r`, `CVE-2024-24753`, `PKSA-2gyh-rhqm-nrbw` · Packagist `bref/bref`: affected `<2.1.13`, fixed in `2.1.13` · CVSS 4.8 Medium · Not analysed yet · Published 1 Feb 2024 · Tags: CWE-436
- [Command substitution output can trigger shell expansion in fish shell](https://agentprime.io/advisories/CVE-2023-49284.md)
  `CVE-2023-49284` · CVE record: fish-shell fish-shell · CVSS 3.9 Low · Not analysed yet · Published 4 Dec 2023 · Tags: CWE-436
- [Fortinet IPS Engine: A interpretation conflict in Fortinet IPS Engine versions 7.321…](https://agentprime.io/advisories/CVE-2023-40718.md)
  `CVE-2023-40718` · CVE record: Fortinet IPS Engine · CVSS 6.7 Medium · Not analysed yet · Published 10 Oct 2023 · Tags: CWE-436
- [Authentik lacks Proxy IP headers validation](https://agentprime.io/advisories/CVE-2023-36456.md)
  `CVE-2023-36456` · CVE record: goauthentik authentik · CVSS 8.3 High · Not analysed yet · Published 6 Jul 2023 · Tags: CWE-436
- [There is a misinterpretation of input vulnerability in Huawei Printer.](https://agentprime.io/advisories/CVE-2022-48471.md)
  `CVE-2022-48471` · CVE record: Huawei BiSheng-WNM · CVSS 7.5 High · Not analysed yet · Published 16 Jun 2023 · Tags: CWE-436
- [Improper Input Validation in nyholm/psr7](https://agentprime.io/advisories/GHSA-wjfc-pgfp-pv9c.md)
  `GHSA-wjfc-pgfp-pv9c`, `PKSA-8ds9-sp96-ghmb` · Packagist `nyholm/psr7`: affected `<1.6.1`, fixed in `1.6.1` · CVSS 5.3 Medium · Not analysed yet · Published 21 Apr 2023 · Tags: CWE-436
- [Improper header validation in httpsoft/http-message](https://agentprime.io/advisories/GHSA-9jxr-mwpp-w643.md)
  `GHSA-9jxr-mwpp-w643`, `PKSA-1sgc-2dst-ytpv` · Packagist `httpsoft/http-message`: affected `<1.0.12`, fixed in `1.0.12` · CVSS 5.3 Medium · Not analysed yet · Published 21 Apr 2023 · Tags: CWE-436
- [Improper header name validation in guzzlehttp/psr7](https://agentprime.io/advisories/GHSA-wxmh-65f7-jcvw.md)
  `GHSA-wxmh-65f7-jcvw`, `CVE-2023-29197`, `PKSA-hn62-zkx4-1y5q` · Packagist `guzzlehttp/psr7`: affected `<1.9.1 || >=2.0.0, <2.4.5`, fixed in `1.9.1`, `2.4.5` · CVSS 5.3 Medium · Not analysed yet · Published 19 Apr 2023 · Tags: CWE-436
- [Insecure header validation in slim/psr7](https://agentprime.io/advisories/GHSA-q2qj-628g-vhfw.md)
  `GHSA-q2qj-628g-vhfw`, `CVE-2023-30536`, `PKSA-q85h-412r-2kwq` · Packagist `slim/psr7`: affected `<1.4.1 || >=1.5, <1.5.1 || >=1.6, <1.6.1`, fixed in `1.4.1`, `1.5.1`, `1.6.1` · CVSS 6.5 Medium · Not analysed yet · Published 18 Apr 2023 · Tags: CWE-436
- [OpenZeppelin Contracts TransparentUpgradeableProxy clashing selector calls may not be delegated](https://agentprime.io/advisories/GHSA-mx2q-35m2-x2rh.md)
  `GHSA-mx2q-35m2-x2rh`, `CVE-2023-30541` · npm `@openzeppelin/contracts` and 1 more: affected `>=3.2.0, <4.8.3`, fixed in `4.8.3` · CVSS 5.3 Medium · Not analysed yet · Published 17 Apr 2023 · Tags: CWE-436
- [In the Linux kernel before 6.0.3, drivers/gpu/drm/virtio/virtgpu_object.c misinterprets the drm_gem_shmem_get_sg_table return value (expects it to be NULL in the error case, whereas it is actually an…](https://agentprime.io/advisories/CVE-2023-22998.md)
  `CVE-2023-22998` · CVE record · CVSS 5.5 Medium · Not analysed yet · Published 28 Feb 2023 · Tags: CWE-436
- [There is a misinterpretation of input vulnerability in BiSheng-WNM FW 3.0.0.325.](https://agentprime.io/advisories/CVE-2022-48261.md)
  `CVE-2022-48261` · CVE record: BiSheng-WNM · CVSS 7.5 High · Not analysed yet · Published 27 Feb 2023 · Tags: CWE-436
- [There is a misinterpretation of input vulnerability in BiSheng-WNM FW 3.0.0.325.](https://agentprime.io/advisories/CVE-2022-48230.md)
  `CVE-2022-48230` · CVE record: BiSheng-WNM · CVSS 7.5 High · Not analysed yet · Published 27 Feb 2023 · Tags: CWE-436
- [User uploads proxied from S3 lack \`Content-Security-Policy\` headers, may be served with \`Content-Disposition: inline\` in zulip](https://agentprime.io/advisories/CVE-2023-22735.md)
  `CVE-2023-22735` · CVE record: zulip zulip · CVSS 4.4 Medium · Not analysed yet · Published 7 Feb 2023 · Tags: CWE-436

Newest: <https://agentprime.io/advisories/tag/cwe-436.md>
Older: <https://agentprime.io/advisories/tag/cwe-436.md?cursor=WyIyMDIzLTAyLTA3VDE4OjQ4OjI5Ljg3MDAwMFoiLCJDVkUtMjAyMy0yMjczNSJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-436&cursor=WyIyMDI2LTA0LTE2VDIxOjI4OjI2LjAwMDAwMFoiLCJHSFNBLXZxeDItZmd4Mi01d3E5Il0>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-436/?cursor=WyIyMDI2LTA0LTE2VDIxOjI4OjI2LjAwMDAwMFoiLCJHSFNBLXZxeDItZmd4Mi01d3E5Il0>. Everything for agents: <https://agentprime.io/llms.txt>.