Common Weakness Enumeration
CWE-777 Regular Expression without Anchors
Description
The product uses a regular expression to perform neutralization, but the regular expression is not anchored and may allow malicious or malformed data to slip through.
Associated Reviewed Advisories
Vulnerabilities classified under CWE-777 ordered by modification date.
| Advisory ID | NVD ID | Severity | PURLs | Summary | Last Modified |
|---|---|---|---|---|---|
| GHSA-24qx-w28j-9m6p | CVE-2026-40110 | HIGH |
Jupyter Server has a CORS Origin Validation Bypass via `re.match()` in `allow_origin_pat` |
2026-07-31 | |
| GHSA-rmmh-p597-ppvv | CVE-2024-1899 | MODERATE |
Showdown vulnerable to Regular Expression Denial of Service (ReDoS) in link/anchor parsing |
2026-04-24 |