# CWE-625.

Every Advisory and CVE whose sources give the weakness CWE-625, newest first.

## Records, newest first

- [CGI versions before 5.00 for Perl allow denial of service via submitted values used as a regex for optgroup selection in scrolling_list](https://agentprime.io/advisories/CVE-2026-120645.md)
  `CVE-2026-120645` · CVE record · No CVSS score · Not analysed yet · Published 3 Nov 2026 · Tags: Denial of service, CWE-625
- [CGI::Cookie versions from 4.67 before 5.00 for Perl allow denial of service via the client cookie expires value used as a regex in parse](https://agentprime.io/advisories/CVE-2026-120631.md)
  `CVE-2026-120631` · CVE record · No CVSS score · Not analysed yet · Published 3 Nov 2026 · Tags: Denial of service, CWE-625
- [CallBackery versions before 0.62.0 for Perl accept unintended values in form fields checked by createRxValidator](https://agentprime.io/advisories/CVE-2026-118995.md)
  `CVE-2026-118995` · CVE record · No CVSS score · Not analysed yet · Published 30 Oct 2026 · Tags: CWE-625
- [Wails: wildcardPatternToRegex allows Origin bypass via suffix match in BindingsAllowedOrigins](https://agentprime.io/advisories/GHSA-47hv-j4px-h3c9.md)
  `GHSA-47hv-j4px-h3c9`, `CVE-2026-34157`, `GO-2026-6862` · Go `github.com/wailsapp/wails/v2`: affected `>=2.0.0, <2.13.0`, fixed in `2.13.0` · CVSS 7.6 High · Not analysed yet · Published 27 Oct 2026 · Tags: CWE-625
- [Permissive Regular Expression in GitLab](https://agentprime.io/advisories/CVE-2026-14814.md)
  `CVE-2026-14814` · CVE record: GitLab GitLab · CVSS 8.2 High · Not analysed yet · Published 13 Oct 2026 · Tags: CWE-625
- [JupyterLab: Cross-site scripting (XSS) in JupyterLab via crafted language package (jupyterlab.json)](https://agentprime.io/advisories/GHSA-3jqq-pw4j-pqcj.md)
  `GHSA-3jqq-pw4j-pqcj`, `CVE-2026-102830`, `PYSEC-2026-4056`, `PYSEC-2026-4059` · PyPI `jupyterlab` and 1 more: affected `>=3.0.0, <4.5.11 || >=4.6.0, <4.6.4`, fixed in `4.5.11`, `4.6.4` · CVSS 6.8 Medium · Not analysed yet · Published 1 Oct 2026 · Tags: Cross-site scripting (XSS), Code injection, CWE-625
- [Astro: Netlify Image CDN allowlist bypass enables SSRF](https://agentprime.io/advisories/GHSA-4233-jc72-56c5.md)
  `GHSA-4233-jc72-56c5`, `CVE-2026-102983` · npm `@astrojs/netlify`: affected `>=5.2.0, <8.2.4`, fixed in `8.2.4` · CVSS 6.3 Medium · Not analysed yet · Published 30 Sept 2026 · Tags: Server-side request forgery (SSRF), CWE-625
- [Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an External Control of Critical State Data vulnerability.](https://agentprime.io/advisories/CVE-2026-79965.md)
  `CVE-2026-79965` · CVE record: Dell Secure Connect Gateway 5.0 - Application and 1 more · CVSS 5.3 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: CWE-625
- [xmldom: requireWellFormed element/attribute name validation is bypassable via an embedded line terminator](https://agentprime.io/advisories/GHSA-jxjr-3g7g-3944.md)
  `GHSA-jxjr-3g7g-3944`, `CVE-2026-83617` · npm `@xmldom/xmldom`: affected `>=0.9.11, <0.9.12`, fixed in `0.9.12` · CVSS 8.7 High · Not analysed yet · Published 8 Sept 2026 · Tags: Other injection, CWE-625
- [xmldom: Creation-time XML Name/QName validation is bypassable via an embedded line terminator, allowing injection on the default serialization path](https://agentprime.io/advisories/GHSA-3px3-54cx-rmw9.md)
  `GHSA-3px3-54cx-rmw9`, `CVE-2026-83609` · npm `@xmldom/xmldom`: affected `>=0.9.0, <0.9.12`, fixed in `0.9.12` · CVSS 8.7 High · Not analysed yet · Published 8 Sept 2026 · Tags: Other injection, CWE-625
- [xmldom: requireWellFormed DocType publicId/systemId validation is bypassable via an embedded line terminator](https://agentprime.io/advisories/GHSA-vr34-hp96-76pp.md)
  `GHSA-vr34-hp96-76pp`, `CVE-2026-83618` · npm `@xmldom/xmldom`: affected `>=0.9.10, <0.9.12`, fixed in `0.9.12` · CVSS 8.7 High · Not analysed yet · Published 8 Sept 2026 · Tags: Other injection, CWE-625
- [CKAN MCP Server: MQA server allowlist bypass via unanchored regex (\`isValidMqaServer\`)](https://agentprime.io/advisories/GHSA-83x6-42hr-jc76.md)
  `GHSA-83x6-42hr-jc76`, `CVE-2026-73845` · npm `@aborruso/ckan-mcp-server`: affected `<0.4.112`, fixed in `0.4.112` · CVSS 5.3 Medium · Not analysed yet · Published 2 Sept 2026 · Tags: Server-side request forgery (SSRF), CWE-20, CWE-625
- [AshPhoenix get_subdomain maps a crafted or differently-cased Host header to an arbitrary tenant](https://agentprime.io/advisories/GHSA-rpf8-q9jh-qxrr.md)
  `GHSA-rpf8-q9jh-qxrr`, `CVE-2026-82726`, `EEF-CVE-2026-82726` · Hex `ash_phoenix`: affected `>=2.1.26, <2.3.25`, fixed in `2.3.25` · CVSS 6.3 Medium · Not analysed yet · Published 31 Aug 2026 · Tags: CWE-178, CWE-625
- [PraisonAI has a Browser Server WebSocket origin validation bypass via unanchored regex (patch bypass of CVE-2026-40289 / GHSA-8x8f-54wf-vv92)](https://agentprime.io/advisories/GHSA-6g6r-q6gw-w8fg.md)
  `GHSA-6g6r-q6gw-w8fg`, `CVE-2026-55536`, `PYSEC-2026-3886` · PyPI `praisonai`: affected `<4.6.58`, fixed in `4.6.58` · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 25 Aug 2026 · Tags: Broken access control, CWE-625
- [Stackrox: stackrox: privilege escalation via unanchored regular expressions in auth m2m role mappings](https://agentprime.io/advisories/CVE-2026-19278.md)
  `CVE-2026-19278` · CVE record: Red Hat Red Hat Advanced Cluster Security 4 · CVSS 6.8 Medium · Not analysed yet · Published 10 Aug 2026 · Tags: CWE-625
- [Nishishi Factory Tegalog -Fumy Otegaru Memo Logger-: Tegalog -Fumy Otegaru Memo Logger- provided by Nishishi Factory contains a vulnerability…](https://agentprime.io/advisories/CVE-2026-64940.md)
  `CVE-2026-64940` · CVE record: Nishishi Factory Tegalog -Fumy Otegaru Memo Logger- · CVSS 8.8 High · Not analysed yet · Published 10 Aug 2026 · Tags: CWE-625
- [sanic-cors contains an improper regular expression in the try_match() function](https://agentprime.io/advisories/GHSA-94jw-hqvj-vw74.md)
  `GHSA-94jw-hqvj-vw74`, `CVE-2026-37737`, `PYSEC-2026-3539` · PyPI `sanic-cors`: affected `<=2.2.0`, no fixed version yet · CVSS 6.5 Medium · Not analysed yet · Published 5 Jun 2026 · Tags: CWE-346, CWE-625
- [CarrierWave has a denylisted_content_type bypass via Unescaped Regex Metacharacters](https://agentprime.io/advisories/GHSA-7g26-2qgj-chfg.md)
  `GHSA-7g26-2qgj-chfg`, `CVE-2026-44587` · RubyGems `carrierwave`: affected `<2.2.7 || >=3.0.0.beta, <3.1.3`, fixed in `2.2.7`, `3.1.3` · CVSS 4.7 Medium · Not analysed yet · Published 27 May 2026 · Tags: Cross-site scripting (XSS), CWE-116, CWE-184, CWE-625
- [Jupyter Server has a CORS Origin Validation Bypass via \`re.match()\` in \`allow_origin_pat\`](https://agentprime.io/advisories/GHSA-24qx-w28j-9m6p.md)
  `GHSA-24qx-w28j-9m6p`, `CVE-2026-40110`, `PYSEC-2026-2187` · PyPI `jupyter-server`: affected `<2.18.0`, fixed in `2.18.0` · CVSS 7.6 High · Not analysed yet · Published 5 May 2026 · Tags: CWE-625, CWE-777
- [Rack::Sendfile header-based X-Accel-Mapping regex injection enables unauthorized X-Accel-Redirect](https://agentprime.io/advisories/GHSA-qv7j-4883-hwh7.md)
  `GHSA-qv7j-4883-hwh7`, `CVE-2026-34830` · RubyGems `rack`: affected `<2.2.23 || >=3.0.0.beta1, <3.1.21 || >=3.2.0, <3.2.6`, fixed in `2.2.23`, `3.1.21`, `3.2.6` · CVSS 5.9 Medium · Not analysed yet · Published 2 Apr 2026 · Tags: CWE-625
- [Rack has a root directory disclosure via unescaped regex interpolation in Rack::Directory](https://agentprime.io/advisories/GHSA-7mqq-6cf9-v2qp.md)
  `GHSA-7mqq-6cf9-v2qp`, `CVE-2026-34763` · RubyGems `rack`: affected `<2.2.23 || >=3.0.0.beta1, <3.1.21 || >=3.2.0, <3.2.6`, fixed in `2.2.23`, `3.1.21`, `3.2.6` · CVSS 5.3 Medium · Not analysed yet · Published 2 Apr 2026 · Tags: CWE-625
- [OpenClaw: Exec approval allowlist patterns overmatched on POSIX paths](https://agentprime.io/advisories/GHSA-f8r2-vg7x-gh8m.md)
  `GHSA-f8r2-vg7x-gh8m`, `CVE-2026-32973` · npm `openclaw`: affected `<2026.3.11`, fixed in `2026.3.11` · CVSS 8.8 High · Not analysed yet · Published 13 Mar 2026 · Tags: CWE-178, CWE-625
- [Microsoft ACI Confidential Containers Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-23651.md)
  `CVE-2026-23651` · CVE record: Microsoft Microsoft ACI Confidential Containers · CVSS 6.7 Medium · Not analysed yet · Published 5 Mar 2026 · Tags: CWE-625
- [Keycloak Authorization Bypass vulnerability](https://agentprime.io/advisories/GHSA-46c8-635v-68r2.md)
  `GHSA-46c8-635v-68r2`, `CVE-2023-6544` · Maven `org.keycloak:keycloak-services`: affected `<22.0.10 || >=23.0.0, <24.0.3`, fixed in `22.0.10`, `24.0.3` · CVSS 5.4 Medium · Not analysed yet · Published 17 Apr 2024 · Tags: CWE-625
- [Improper Input Validation in Google Closure Library](https://agentprime.io/advisories/GHSA-vh5w-fg69-rc8m.md)
  `GHSA-vh5w-fg69-rc8m`, `CVE-2020-8910` · npm `google-closure-library`: affected `<20200315.0.0`, fixed in `20200315.0.0` · CVSS 6.5 Medium · Not analysed yet · Published 7 May 2021 · Tags: CWE-20, CWE-625
- [Synology Photo Station: Permissive regular expression vulnerability in synophoto_dsm_user in Synology Photo…](https://agentprime.io/advisories/CVE-2018-8926.md)
  `CVE-2018-8926` · CVE record: Synology Photo Station · CVSS 8.8 High · Not analysed yet · Published 8 Jun 2018 · Tags: CWE-625

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-625>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-625/>. Everything for agents: <https://agentprime.io/llms.txt>.