CWE-176 Improper Handling of Unicode Encoding
Description
The product does not properly handle when an input contains Unicode encoding.
Associated Reviewed Advisories
Vulnerabilities classified under CWE-176 ordered by modification date.
| Advisory ID | NVD ID | Severity | PURLs | Summary | Last Modified |
|---|---|---|---|---|---|
| GHSA-p9f8-wvj8-2fg8 | CVE-2026-81869 | MODERATE |
OpenTelemetry-Go: UTF-8 replacement rune bypasses attribute length truncation |
2026-09-29 | |
| GHSA-8xpq-cjcf-3wh9 | CVE-2026-49401 | HIGH | - |
Deno: Permission Bypass via Unicode Normalization Mismatch on macOS (APFS) |
2026-07-31 |
| GHSA-h35f-9h28-mq5c | CVE-2026-59890 | MODERATE |
setuptools: MANIFEST.in exclusion bypass in sdist via Unicode normalization collision (NFC/NFD) on macOS APFS/HFS+ |
2026-07-21 | |
| GHSA-m675-2p33-xv9g | CVE-2026-45135 | HIGH |
Caddy: Unsafe Unicode Handling in FastCGI splitPos Allows Execution of Non-PHP Files |
2026-07-20 | |
| GHSA-jcjr-rh8q-7xqf | CVE-2026-35373 | LOW | - |
ln: rejects non-UTF-8 source filenames in target-directory mode |
2026-07-06 |
| GHSA-xh5h-p8c5-4w4x | - | LOW | - |
Duplicate Advisory: uutils coreutils has an Improper Handling of Unicode Encoding Issue |
2026-07-06 |
| GHSA-6gcw-w7cp-94g9 | CVE-2026-35346 | LOW | - |
comm: lossy UTF-8 conversion silently corrupts non-UTF-8 output |
2026-07-06 |
| GHSA-hwhf-8p2f-45wr | - | LOW | - |
Duplicate Advisory: coreutils' comm utility silently corrupts data by performing lossy UTF-8 conversion on all output lines |
2026-07-06 |
| GHSA-3g8v-8r37-cgjm | CVE-2026-45062 | HIGH |
FrankenPHP: Unsafe Unicode Handling in CGI Path Splitting Allows Execution of Non-PHP Files |
2026-06-10 | |
| GHSA-q6x5-8v7m-xcrf | CVE-2026-44288 | MODERATE |
protobufjs has overlong UTF-8 decoding |
2026-05-14 | |
| GHSA-vx9m-xjwf-8cqm | CVE-2026-35375 | LOW | - |
uutils coreutils has an Improper Handling of Unicode Encoding Issue |
2026-04-30 |
| GHSA-r6q2-hw4h-h46w | CVE-2026-23950 | HIGH |
Race Condition in node-tar Path Reservations via Unicode Ligature Collisions on macOS APFS |
2026-03-16 | |
| GHSA-392f-ggf5-fp3c | - | MODERATE |
OpenClaw: Unicode canonicalization drift in node metadata policy classification could broaden node allowlists |
2026-03-02 | |
| GHSA-vxqx-rh46-q2pg | CVE-2026-25480 | MODERATE |
Litestar's FileStore key canonicalization collisions allow response cache mixup/poisoning (ASCII ord + Unicode NFKD) |
2026-02-09 | |
| GHSA-g5vf-v6wf-7w2r | CVE-2020-8929 | MODERATE |
Ciphertext Malleability Issue in Tink Java |
2025-06-05 | |
| GHSA-wpmx-564x-h2mh | CVE-2023-52081 | MODERATE |
ewen-lbh/ffcss Late-Unicode normalization vulnerability |
2024-03-01 |