Common Weakness Enumeration
CWE-626 Null Byte Interaction Error (Poison Null Byte)
Description
The product does not properly handle null bytes or NUL characters when passing data between different representations or components.
Associated Reviewed Advisories
Vulnerabilities classified under CWE-626 ordered by modification date.
| Advisory ID | NVD ID | Severity | PURLs | Summary | Last Modified |
|---|---|---|---|---|---|
| GHSA-cm33-6792-r9fm | CVE-2026-42579 | HIGH |
Netty has a DNS Codec Input Validation Bypass (Encoder + Decoder) |
2026-05-14 | |
| GHSA-xhjh-pmcv-23jw | CVE-2026-42040 | LOW |
Axios: Null Byte Injection via Reverse-Encoding in AxiosURLSearchParams |
2026-05-05 |