Common Weakness Enumeration
CWE-140 Improper Neutralization of Delimiters
Description
The product does not neutralize or incorrectly neutralizes delimiters.
Associated Reviewed Advisories
Vulnerabilities classified under CWE-140 ordered by modification date.
| Advisory ID | NVD ID | Severity | PURLs | Summary | Last Modified |
|---|---|---|---|---|---|
| GHSA-v39h-62p7-jpjc | CVE-2026-6322 | HIGH |
fast-uri vulnerable to host confusion via percent-encoded authority delimiters |
2026-09-01 | |
| GHSA-9wj4-8h85-pgrw | CVE-2025-48879 | MODERATE |
OctoPrint Vulnerable to Denial of Service through malformed HTTP request in OctoPrint |
2025-06-10 | |
| GHSA-xj87-mqvh-88w2 | CVE-2024-42482 | MODERATE | - |
fish-shop/syntax-check Improper Neutralization of Delimiters |
2024-08-12 |
| GHSA-x5mr-p6v4-wp93 | CVE-2023-38488 | HIGH | - |
Field injection in the KirbyData text storage handler |
2023-07-28 |