Common Weakness Enumeration

CWE-156 Improper Neutralization of Whitespace

Description

The product receives input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could be interpreted as whitespace when they are sent to a downstream component.

Associated Reviewed Advisories

Vulnerabilities classified under CWE-156 ordered by modification date.

4 reviewed records

Advisory ID	NVD ID	Severity	PURLs	Summary	Last Modified
GHSA-2q8q-8fgw-9p6p	CVE-2025-55001	MODERATE	golang/github.com/openbao/openbao	OpenBao LDAP MFA Enforcement Bypass When Using Username As Alias	2025-08-11
GHSA-f7c3-mhj2-9pvg	CVE-2025-55000	MODERATE	golang/github.com/openbao/openbao	OpenBao TOTP Secrets Engine Code Reuse	2025-08-11
GHSA-7rx2-769v-hrwf	CVE-2025-6013	MODERATE	golang/github.com/hashicorp/vault	HashiCorp Vault ldap auth method may not have correctly enforced MFA	2025-08-06
GHSA-qv3p-fmv3-9hww	CVE-2025-6014	MODERATE	golang/github.com/hashicorp/vault	Hashicorp Vault's TOTP Secrets Engine Susceptible to Code Reuse	2025-08-01