Common Weakness Enumeration

CWE-261 Weak Encoding for Password

Description

Obscuring a password with a trivial encoding does not protect the password.

Associated Reviewed Advisories

Vulnerabilities classified under CWE-261 ordered by modification date.

2 reviewed records
Advisory ID NVD ID Severity PURLs Summary Last Modified
GHSA-2cjv-6wg9-f4f3 CVE-2025-25298 MODERATE
npm/@strapi/core

Strapi Password Hashing is Missing Maximum Password Length Validation

 2025-11-27
GHSA-qh54-9vc5-m9fg - LOW
golang/github.com/foxcpp/maddy

MD5 hash support in github.com/foxcpp/maddy

 2021-10-11