Common Weakness Enumeration

CWE-173 Improper Handling of Alternate Encoding

Description

The product does not properly handle when an input uses an alternate encoding that is valid for the control sphere to which the input is being sent.

Associated Reviewed Advisories

Vulnerabilities classified under CWE-173 ordered by modification date.

5 reviewed records
Advisory ID NVD ID Severity PURLs Summary Last Modified
GHSA-2fvj-hgj9-j2gr CVE-2026-10050 HIGH
maven/org.eclipse.jetty.ee8/jetty-ee8-security maven/org.eclipse.jetty.ee9/jetty-ee9-security maven/org.eclipse.jetty/jetty-security

Eclipse Jetty Digest Authentication: ISO-8859-1 lossy encoding allows authentication bypass via character substitution

 2026-07-22
GHSA-5mg8-w23w-74h3 CVE-2020-8908 LOW
maven/com.google.guava/guava

Information Disclosure in Guava

 2026-02-23
GHSA-vrjv-mxr7-vjf8 CVE-2023-26303 HIGH
pypi/markdown-it-py

markdown-it-py Denial of Service vulnerability

 2024-09-30
GHSA-jrwr-5x3p-hvc3 CVE-2023-26302 HIGH
pypi/markdown-it-py

markdown-it-py Denial of Service vulnerability in the command line interface

 2024-09-30
GHSA-r683-j2x4-v87g CVE-2022-0235 HIGH
npm/node-fetch

node-fetch forwards secure headers to untrusted sites

 2023-09-07