Common Weakness Enumeration

CWE-76 Improper Neutralization of Equivalent Special Elements

Description

The product correctly neutralizes certain special elements, but it improperly neutralizes equivalent special elements.

Associated Reviewed Advisories

Vulnerabilities classified under CWE-76 ordered by modification date.

4 reviewed records
Advisory ID NVD ID Severity PURLs Summary Last Modified
GHSA-cg4g-m8jx-vjv2 CVE-2026-54722 HIGH
npm/dssrf

dssrf has an SSRF bypass with remove_at_symbol_in_string

 2026-07-30
GHSA-46cm-pfwv-cgf8 CVE-2024-2952 CRITICAL
pypi/litellm

LiteLLM has Server-Side Template Injection vulnerability in /completions endpoint

 2026-07-06
GHSA-56xg-wfcc-g829 CVE-2024-34359 CRITICAL
pypi/llama-cpp-python

llama-cpp-python vulnerable to Remote Code Execution by Server-Side Template Injection in Model Metadata

 2024-05-20
GHSA-33gv-rvgq-gpxp CVE-2023-0493 HIGH
nuget/BTCPayServer.Client

Withdrawn Advisory: HTML injections in BTCPayServer

 2023-10-10