Common Weakness Enumeration
CWE-154 Improper Neutralization of Variable Name Delimiters
Description
The product receives input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could be interpreted as variable name delimiters when they are sent to a downstream component.
Associated Reviewed Advisories
Vulnerabilities classified under CWE-154 ordered by modification date.
| Advisory ID | NVD ID | Severity | PURLs | Summary | Last Modified |
|---|---|---|---|---|---|
| GHSA-9jxc-qjr9-vjxq | CVE-2024-39698 | HIGH |
electron-updater Code Signing Bypass on Windows |
2024-07-12 |