# CWE-75. Every Advisory and CVE whose sources give the weakness CWE-75, newest first. ## Records, newest first - [Duplicate Advisory: Untrusted Query Object Evaluation in RPC API](https://agentprime.io/advisories/GHSA-xw2c-hrr9-4xwr.md) `GHSA-xw2c-hrr9-4xwr`, `CVE-2024-58362` · crates.io `surrealdb`: affected `*`, no fixed version yet · CVSS 8.7 High · Withdrawn · Not analysed yet · Published 18 Jul 2026 · Tags: CWE-75 - [Langroid: handle_message() executes user-supplied tool JSON without sender verification](https://agentprime.io/advisories/GHSA-gjgq-w2m6-wr5q.md) `GHSA-gjgq-w2m6-wr5q`, `CVE-2026-54771`, `PYSEC-2026-2579` · PyPI `langroid`: affected `<0.65.3`, fixed in `0.65.3` · CVSS 8.1 High · Not analysed yet · Published 6 Jul 2026 · Tags: Other injection, CWE-75 - [Apache APISIX: forward auth plugin allows header injection](https://agentprime.io/advisories/CVE-2026-31908.md) `CVE-2026-31908` · CVE record: Apache Software Foundation Apache APISIX · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Apr 2026 · Tags: CWE-75 - [Nuclio Shell Runtime Command Injection Leading to Privilege Escalation](https://agentprime.io/advisories/GHSA-95fj-3w7g-4r27.md) `GHSA-95fj-3w7g-4r27`, `CVE-2026-29042`, `GO-2026-4598` · Go `github.com/nuclio/nuclio`: affected `<1.15.20`, fixed in `1.15.20` · CVSS 8.9 High · Not analysed yet · Published 4 Mar 2026 · Tags: CWE-75 - [Leaf-kit html escaping does not work on characters that are part of extended grapheme cluster](https://agentprime.io/advisories/CVE-2026-27120.md) `CVE-2026-27120` · CVE record: vapor leaf-kit · CVSS 6.1 Medium · Not analysed yet · Published 20 Feb 2026 · Tags: Cross-site scripting (XSS), CWE-75 - [Iframe injection vulnerability in airc.pt/solucoes-servicos.solucoes MyNET v.26.06 and before allows a remote attacker to execute arbitrary code via the src parameter.](https://agentprime.io/advisories/CVE-2024-27708.md) `CVE-2024-27708` · CVE record · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 22 Dec 2025 · Tags: Other injection, CWE-75 - [python-ldap has sanitization bypass in ldap.filter.escape_filter_chars](https://agentprime.io/advisories/GHSA-r7r6-cc7p-4v5m.md) `GHSA-r7r6-cc7p-4v5m`, `CVE-2025-61911`, `PYSEC-2026-1847` · PyPI `python-ldap`: affected `<3.4.5`, fixed in `3.4.5` · CVSS 5.5 Medium · Not analysed yet · Published 10 Oct 2025 · Tags: Memory corruption, CWE-75 - [Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) vulnerability in Apache Airflow Providers Snowflake.](https://agentprime.io/advisories/GHSA-9r64-3wmc-x8m8.md) `GHSA-9r64-3wmc-x8m8`, `CVE-2025-50213`, `PYSEC-2025-51` · PyPI `apache-airflow-providers-snowflake`: affected `<6.4.0`, fixed in `6.4.0` · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 24 Jun 2025 · Tags: CWE-75 - [Calculated Fields Form <= 5.2.45 - HTML Injection](https://agentprime.io/advisories/CVE-2024-9940.md) `CVE-2024-9940` · CVE record: codepeople Calculated Fields Form · CVSS 5.3 Medium · Not analysed yet · Published 17 Oct 2024 · Tags: CWE-75 - [WoodWing Elvis DAM v6.98.1 was discovered to contain an authenticated remote command execution (RCE) vulnerability via the Apache Ant script functionality.](https://agentprime.io/advisories/CVE-2024-37779.md) `CVE-2024-37779` · CVE record · CVSS 8.8 High · Not analysed yet · Published 23 Sept 2024 · Tags: Code injection, CWE-75 - [Untrusted Query Object Evaluation in RPC API](https://agentprime.io/advisories/GHSA-64f8-pjgr-9wmr.md) `GHSA-64f8-pjgr-9wmr`, `CVE-2024-58362` · crates.io `surrealdb` and 1 more: affected `<1.5.5 || >=2.0.0-beta.1, <2.0.0-beta.3`, fixed in `1.5.5`, `2.0.0-beta.3` · CVSS 8.7 High · Not analysed yet · Published 11 Sept 2024 · Tags: CWE-75 - [GL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750 v4.3.11, MT3000/MT2500/AXT1800/AX1800/A1300/X300B v4.5.16, XE300 v4.3.16, E750 v4.3.12, AP1300/S1300 v4.3.13, and XE3…](https://agentprime.io/advisories/CVE-2024-39227.md) `CVE-2024-39227` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 Aug 2024 · Tags: CWE-75 - [An issue in skteco.com Central Control Attendance Machine web management platform v.3.0 allows an attacker to obtain sensitive information via a crafted script to the csl/user component.](https://agentprime.io/advisories/CVE-2024-24257.md) `CVE-2024-24257` · CVE record · CVSS 7.5 High · Not analysed yet · Published 26 Jul 2024 · Tags: CWE-75 - [An issue discovered in skycaiji 2.8 allows attackers to run arbitrary code via crafted POST request to /index.php?s=/admin/develop/editor_save.](https://agentprime.io/advisories/CVE-2024-39243.md) `CVE-2024-39243` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 26 Jun 2024 · Tags: CWE-75 - [Mocodo Mocodo Online 4.2.6 and below is vulnerable to Remote Code Execution via /web/rewrite.php.](https://agentprime.io/advisories/CVE-2024-35373.md) `CVE-2024-35373` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 24 May 2024 · Tags: CWE-75 - [In TOTOLINK EX200 V4.0.3c.7646_B20201211, an attacker can obtain sensitive information without authorization through the function getWiFiExtenderConfig.](https://agentprime.io/advisories/CVE-2024-31812.md) `CVE-2024-31812` · CVE record · CVSS 6.5 Medium · Not analysed yet · Published 8 Apr 2024 · Tags: CWE-75 - [TOTOLINK EX200 V4.0.3c.7646_B20201211 was discovered to contain a remote code execution (RCE) vulnerability via the FileName parameter in the setUpgradeFW function.](https://agentprime.io/advisories/CVE-2024-31809.md) `CVE-2024-31809` · CVE record · CVSS 8.8 High · Not analysed yet · Published 8 Apr 2024 · Tags: CWE-75 - [TOTOLINK EX200 V4.0.3c.7646_B20201211 was discovered to contain a Denial-of-Service (DoS) vulnerability in the RebootSystem function which can reboot the system without authorization.](https://agentprime.io/advisories/CVE-2024-31806.md) `CVE-2024-31806` · CVE record · CVSS 6.5 Medium · Not analysed yet · Published 8 Apr 2024 · Tags: CWE-75 - [Winter CMS Server-Side Template Injection (SSTI) vulnerability](https://agentprime.io/advisories/GHSA-8r5j-gm3j-cx9c.md) `GHSA-8r5j-gm3j-cx9c`, `CVE-2024-29686`, `PKSA-8f2z-f7m8-2xxr` · Packagist `wintercms/winter`: affected `<=1.2.3`, no fixed version yet · CVSS 8.8 High · Not analysed yet · Published 29 Mar 2024 · Tags: CWE-75, CWE-97 - [Black vulnerable to Regular Expression Denial of Service (ReDoS)](https://agentprime.io/advisories/GHSA-fj7x-q9j7-g6q6.md) `GHSA-fj7x-q9j7-g6q6`, `CVE-2024-21503`, `PYSEC-2024-48` · PyPI `black`: affected `<24.3.0`, fixed in `24.3.0` · CVSS 5.3 Medium · Not analysed yet · Published 19 Mar 2024 · Tags: Denial of service, CWE-75 - [Unauthenticated DoS in Arcserve Unified Data Protection](https://agentprime.io/advisories/CVE-2024-0801.md) `CVE-2024-0801` · CVE record: Arcserve Unified Data Protection · CVSS 7.5 High · Critical (CVSS 7+ and EPSS) · EPSS 0.42 · Not analysed yet · Published 13 Mar 2024 · Tags: CWE-75 - [In createSessionInternal of PackageInstallerService.java, there is a possible run-as any app due to improper input validation.](https://agentprime.io/advisories/CVE-2024-0044.md) `CVE-2024-0044` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 11 Mar 2024 · Tags: CWE-75 - [An injection issue was addressed with improved input validation.](https://agentprime.io/advisories/CVE-2024-23274.md) `CVE-2024-23274` · CVE record: Apple macOS · CVSS 8.4 High · Not analysed yet · Published 8 Mar 2024 · Tags: CWE-75 - [An injection issue was addressed with improved input validation.](https://agentprime.io/advisories/CVE-2024-23268.md) `CVE-2024-23268` · CVE record: Apple macOS · CVSS 8.4 High · Not analysed yet · Published 8 Mar 2024 · Tags: CWE-75 - [A remote code execution vulnerability has been identified in the User Defined Tags module of CMS Made Simple version 2.2.19 / 2.2.21.](https://agentprime.io/advisories/CVE-2024-27622.md) `CVE-2024-27622` · CVE record · CVSS 7.2 High · Not analysed yet · Published 5 Mar 2024 · Tags: Code injection, CWE-75 - [Keycloak vulnerable to reflected XSS via wildcard in OIDC redirect_uri](https://agentprime.io/advisories/GHSA-cvg2-7c3j-g36j.md) `GHSA-cvg2-7c3j-g36j`, `CVE-2023-6134` · Maven `org.keycloak:keycloak-services`: affected `<23.0.3`, fixed in `23.0.3` · CVSS 4.6 Medium · Not analysed yet · Published 18 Dec 2023 · Tags: Cross-site scripting (XSS), CWE-75 - [Duplicate Advisory: Keycloak vulnerable to reflected XSS via wildcard in OIDC redirect_uri](https://agentprime.io/advisories/GHSA-5968-qw33-h47j.md) `GHSA-5968-qw33-h47j` · Maven `org.keycloak:keycloak-services`: affected `<23.0.3`, fixed in `23.0.3` · CVSS 4.6 Medium · Withdrawn · Not analysed yet · Published 15 Dec 2023 · Tags: CWE-75 - [Apache Axis 1.x (EOL) may allow RCE when untrusted input is passed to getService](https://agentprime.io/advisories/GHSA-rmqp-9w4c-gc7w.md) `GHSA-rmqp-9w4c-gc7w`, `CVE-2023-40743` · Maven `axis:axis` and 1 more: affected `<=1.4`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 Sept 2023 · Tags: CWE-20, CWE-75 - [thorsten/phpmyfaq vulnerable to stored cross-site scripting (XSS) in FAQ comment username parameter](https://agentprime.io/advisories/GHSA-3j93-7rf7-p7m6.md) `GHSA-3j93-7rf7-p7m6`, `CVE-2023-1758`, `PKSA-5jvn-xj5h-yxw7` · Packagist `thorsten/phpmyfaq`: affected `<3.1.12`, fixed in `3.1.12` · CVSS 8.9 High · Not analysed yet · Published 5 Apr 2023 · Tags: Cross-site scripting (XSS), CWE-75 - [A vulnerability in input validation exists in curl <8.0 during communication using the TELNET protocol may allow an attacker to pass on maliciously crafted user name and "telnet options" during serve…](https://agentprime.io/advisories/CVE-2023-27533.md) `CVE-2023-27533` · CVE record: https\://github.com/curl/curl · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 30 Mar 2023 · Tags: CWE-75 - [Code injection in Ubiquiti EdgeRouter(s) and USG(s)](https://agentprime.io/advisories/CVE-2023-23912.md) `CVE-2023-23912` · CVE record: Ubiquiti EdgeRouter(s) and USG(s) · CVSS 8.8 High · Not analysed yet · Published 9 Feb 2023 · Tags: Code injection, CWE-75 - [Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) in radareorg/radare2](https://agentprime.io/advisories/CVE-2023-0302.md) `CVE-2023-0302` · CVE record: radareorg radareorg/radare2 · CVSS 8.6 High · Not analysed yet · Published 15 Jan 2023 · Tags: CWE-75 - [The tf_remapper_node component 1.1.1 for Robot Operating System (ROS) allows attackers, who control the source code of a different node in the same ROS application, to change a robot's behavior.](https://agentprime.io/advisories/CVE-2022-48217.md) `CVE-2022-48217` · CVE record · CVSS 8.1 High · Not analysed yet · Published 4 Jan 2023 · Tags: CWE-75 - [Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) in GitHub repository ikus060/rdiffweb prior to 2.5.5.](https://agentprime.io/advisories/GHSA-83pm-7v48-5jp4.md) `GHSA-83pm-7v48-5jp4`, `CVE-2022-4721`, `PYSEC-2022-43007` · PyPI `rdiffweb`: affected `<2.5.5`, fixed in `2.5.5` · CVSS 6.6 Medium · Not analysed yet · Published 27 Dec 2022 · Tags: CWE-75 - [Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) in GitHub repository octoprint/octoprint prior to 1.8.3.](https://agentprime.io/advisories/GHSA-rj5f-vm79-5j84.md) `GHSA-rj5f-vm79-5j84`, `CVE-2022-3607`, `PYSEC-2022-42975` · PyPI `octoprint`: affected `<1.8.3`, fixed in `1.8.3` · CVSS 6.0 Medium · Not analysed yet · Published 19 Oct 2022 · Tags: CWE-75 - [Siemens Desigo PXC4: A vulnerability has been identified in Desigo PXC4 (All versions < V02.20.142.10-10884)…](https://agentprime.io/advisories/CVE-2022-24039.md) `CVE-2022-24039` · CVE record: Siemens Desigo PXC4 and 1 more · No CVSS score · Not analysed yet · Published 10 May 2022 · Tags: CWE-75 - [Code injection in plupload](https://agentprime.io/advisories/GHSA-rp2c-jrgp-cvr8.md) `GHSA-rp2c-jrgp-cvr8`, `CVE-2021-23562` · npm `plupload`: affected `<2.3.9`, fixed in `2.3.9` · CVSS 4.2 Medium · Not analysed yet · Published 16 Dec 2021 · Tags: Unrestricted file upload, CWE-75 - [Cachet configuration leak](https://agentprime.io/advisories/GHSA-88f9-7xxh-c688.md) `GHSA-88f9-7xxh-c688`, `CVE-2021-39174`, `PKSA-wqcd-c1yd-y32h` · Packagist `cachethq/cachet`: affected `<2.5.1`, fixed in `2.5.1` · CVSS 8.8 High · Not analysed yet · Published 30 Aug 2021 · Tags: CWE-75 - [Special Element Injection in notebook](https://agentprime.io/advisories/GHSA-hwvq-6gjx-j797.md) `GHSA-hwvq-6gjx-j797`, `BIT-jupyter-base-notebook-2021-32798`, `BIT-jupyter-notebook-2021-32798`, `CVE-2021-32798`, `PYSEC-2021-118` · PyPI `notebook`: affected `<5.7.11 || >=6.0.0, <6.4.1`, fixed in `5.7.11`, `6.4.1` · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 23 Aug 2021 · Tags: Cross-site scripting (XSS), CWE-75 - [JupyterLab: XSS due to lack of sanitization of the action attribute of an html \
](https://agentprime.io/advisories/GHSA-4952-p58q-6crx.md) `GHSA-4952-p58q-6crx`, `BIT-jupyterlab-2021-32797`, `CVE-2021-32797`, `PYSEC-2021-130`, `PYSEC-2026-688` · PyPI `jupyterlab` and 1 more: affected `<1.2.21 || >=2.0.0a0, <2.2.10 || >=2.3.0a0, <2.3.2 || >=3.0.0a0, <3.0.17 || >=3.1.0a0, <3.1.4`, fixed in `1.2.21`, `2.2.10`, `2.3.2`, `3.0.17`, `3.1.4` · CVSS 7.4 High · Not analysed yet · Published 23 Aug 2021 · Tags: Cross-site scripting (XSS), CWE-75 - [Rocket.Chat server: A sanitization vulnerability exists in Rocket.Chat server versions <3.13.2, <3.12.4…](https://agentprime.io/advisories/CVE-2021-22910.md) `CVE-2021-22910` · CVE record: Rocket.Chat server · No CVSS score · Not analysed yet · Published 9 Aug 2021 · Tags: CWE-75 - [Rocket.Chat server: A improper input sanitization vulnerability exists in Rocket.Chat server 3.11…](https://agentprime.io/advisories/CVE-2021-22911.md) `CVE-2021-22911` · CVE record: Rocket.Chat server · No CVSS score · EPSS 0.95 · Not analysed yet · Published 27 May 2021 · Tags: CWE-75 - [Revive Adserver before 3.2.5 and 4.0.0 suffers from Special Element Injection.](https://agentprime.io/advisories/CVE-2016-9471.md) `CVE-2016-9471` · CVE record: Revive Adserver All versions before 3.2.5 and 4.0.0 · No CVSS score · Not analysed yet · Published 28 Mar 2017 · Tags: CWE-75 ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .