CWE-791 Incomplete Filtering of Special Elements
Description
The product receives data from an upstream component, but does not completely filter special elements before sending it to a downstream component.
Associated Reviewed Advisories
Vulnerabilities classified under CWE-791 ordered by modification date.
| Advisory ID | NVD ID | Severity | PURLs | Summary | Last Modified |
|---|---|---|---|---|---|
| GHSA-8364-hfqj-pwm6 | CVE-2026-47323 | CRITICAL |
Camel-CXF and Camel-Knative Message Header are Vulnerable to Injection via Missing Inbound Filtering |
2026-10-05 | |
| GHSA-7x27-g8rg-x87w | CVE-2026-11998 | HIGH |
Angular's deprecated package has a Cross-Site Scripting issue |
2026-07-17 | |
| GHSA-8p33-q827-ghj5 | CVE-2026-44232 | HIGH |
dssrf: every IPv6 category bypasses is_url_safe |
2026-06-18 | |
| GHSA-h3rr-9wqj-v3c6 | CVE-2026-6984 | LOW |
AstrBot has Incomplete Filtering of Special Elements |
2026-05-05 | |
| GHSA-vjgj-42f6-7997 | - | MODERATE |
netfoil's optional seccomp sandboxing was not applied |
2026-04-29 | |
| GHSA-23jg-5f8m-gw8c | CVE-2026-5559 | LOW |
PyBlade: SSTI/RCE via Bypassed AST Validation in sandbox.py |
2026-04-08 | |
| GHSA-q5xx-fxv3-xxqf | CVE-2026-2969 | LOW |
datapizza-ai: Server-Side Template Injection in ChatPromptTemplate via Jinja2 Template Handler |
2026-02-25 | |
| GHSA-mqm9-c95h-x2p6 | CVE-2024-8373 | LOW |
AngularJS allows attackers to bypass common image source restrictions |
2025-11-03 | |
| GHSA-4p4w-6hg8-63wx | CVE-2025-2336 | MODERATE |
AngularJS Incomplete Filtering of Special Elements vulnerability |
2025-11-03 | |
| GHSA-j58c-ww9w-pwp5 | CVE-2025-0716 | LOW |
AngularJS improperly sanitizes SVG elements |
2025-11-03 | |
| GHSA-8gff-cf92-72pv | CVE-2025-6518 | LOW |
pyspur Incomplete Filtering of Special Elements allowed by SingleLLMCallNode function |
2025-06-25 | |
| GHSA-mqqj-fx8h-437j | CVE-2024-39899 | MODERATE | - |
PrivateBin allows shortening of URLs for other domains |
2024-07-12 |