Advisories · Weakness
CWE-777.
Every Advisory and CVE whose sources give the weakness CWE-777, newest first.
-
WebDyne versions from 2.031 before 3.022 for Perl execute files with .psp anywhere in the name as Perl pages
- CWE-777
- CVSS 5.4 Medium
tinyauth before 5.1.3 allows rule bypass by appending an allowed route string.
- tinyauth
- CWE-777
- CVSS 6.9 Medium
Apache Traffic Server: Regex mappings match with malicious domain names
- Apache Software Foundation Apache Traffic Server
- CWE-777
- CVSS 6.9 Medium
Webmin information disclosure via regex pattern
- Webmin
- CWE-185
- CWE-777
- CVSS 7.6 High
Jupyter Server has a CORS Origin Validation Bypass via `re.match()` in `allow_origin_pat`
- CWE-625
- CWE-777
<2.18.0 · fixed in 2.18.0
GHSA-24qx-w28j-9m6p · CVE-2026-40110 - CVSS 6.4 Medium
ntfy.sh allows a remote attacker to execute arbitrary code via the parseActions function
- Code injection
- CWE-777
<2.22.0 · fixed in 2.22.0
GHSA-pqhx-w72w-m393 · CVE-2026-39087 - CVSS 5.3 Medium
Showdown vulnerable to Regular Expression Denial of Service (ReDoS) in link/anchor parsing
- Denial of service
- CWE-777
<=2.1.0 · no fixed version yet
GHSA-rmmh-p597-ppvv · CVE-2024-1899