Common Weakness Enumeration
CWE-159 Improper Handling of Invalid Use of Special Elements
Description
The product does not properly filter, remove, quote, or otherwise manage the invalid use of special elements in user-controlled input, which could cause adverse effect on its behavior and integrity.
Associated Reviewed Advisories
Vulnerabilities classified under CWE-159 ordered by modification date.
| Advisory ID | NVD ID | Severity | PURLs | Summary | Last Modified |
|---|---|---|---|---|---|
| GHSA-fqwm-6jpj-5wxc | CVE-2026-35536 | HIGH |
Tornado has cookie attribute injection via .RequestHandler.set_cookie |
2026-04-04 | |
| GHSA-gjv3-89hh-9xq2 | CVE-2025-52884 | LOW | - |
RISC Zero Ethereum invalid commitment with digest value of zero accepted by Steel.validateCommitment |
2025-06-25 |