CWE-1427 · 8 kayıt
Improper Neutralization of Input Used for LLM Prompting
Bu sınıftaki CVE’ler
8 kayıt
| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
36İzleyin | CVE-2026-78379İstismar yok | Consent bypass in python_repl tool via batch kwargs forwarding in Amazon Strands Agents Toolsamazon · strands-agents-tools · CWE-1427 | Kritik9,2 | — | %0,5 | 25 Ağu 2026 |
34İzleyin | CVE-2026-77931İstismar yok | MoviePilot 3.1.5 Command Injection via ExecuteCommandTooljxxghp · moviepilot · CWE-1427 | Yüksek8,7 | — | — | Bugün |
30İzleyin | CVE-2026-18733İstismar yok | Prompt injection bypasses shell tool consent gate in Strands Agents Toolsaws · strands-agents-tools · CWE-1427 | Yüksek7,5 | — | %0,5 | 3 Ağu 2026 |
25İzleyin | CVE-2026-75130İstismar yok | Context7 2.1.2 Prompt Injection via Custom AI Instructionsuptash · context7 · CWE-1427 | Orta6,4 | — | %0,4 | 18 Ağu 2026 |
22İzleyin | CVE-2024-3303İstismar yok | Improper Neutralization of Input Used for LLM Prompting in GitLabgitlab · gitlab · CWE-1427 | Orta5,7 | — | %0,3 | 13 Şub 2025 |
21İzleyin | CVE-2026-70331İstismar yok | Microsoft Edge for iOS Spoofing Vulnerabilitymicrosoft · edge · CWE-1427 | Orta5,4 | — | %0,4 | 28 Ağu 2026 |
18İzleyin | CVE-2025-36730İstismar yok | Windsurf Prompt Injection via Filenamewindsurf · windsurf · CWE-1427 | Orta4,6 | — | %0,1 | 14 Eki 2025 |
17İzleyin | CVE-2026-21832İstismar yok | HCL AION is affected by multiple security vulnerabilities.hcl software · aion · CWE-1427 | Orta4,3 | — | %0,2 | 13 Ağu 2026 |
- CVE-2026-7837936İzleyin
Consent bypass in python_repl tool via batch kwargs forwarding in Amazon Strands Agents Tools
KritikCVSS 9,2İstismar yokEPSS %0amazon · strands-agents-tools25 Ağu 2026
- CVE-2026-7793134İzleyin
MoviePilot 3.1.5 Command Injection via ExecuteCommandTool
YüksekCVSS 8,7İstismar yokjxxghp · moviepilotBugün
- CVE-2026-1873330İzleyin
Prompt injection bypasses shell tool consent gate in Strands Agents Tools
YüksekCVSS 7,5İstismar yokEPSS %0aws · strands-agents-tools3 Ağu 2026
- CVE-2026-7513025İzleyin
Context7 2.1.2 Prompt Injection via Custom AI Instructions
OrtaCVSS 6,4İstismar yokEPSS %0uptash · context718 Ağu 2026
- CVE-2024-330322İzleyin
Improper Neutralization of Input Used for LLM Prompting in GitLab
OrtaCVSS 5,7İstismar yokEPSS %0gitlab · gitlab13 Şub 2025
- CVE-2026-7033121İzleyin
Microsoft Edge for iOS Spoofing Vulnerability
OrtaCVSS 5,4İstismar yokEPSS %0microsoft · edge28 Ağu 2026
- CVE-2025-3673018İzleyin
Windsurf Prompt Injection via Filename
OrtaCVSS 4,6İstismar yokEPSS %0windsurf · windsurf14 Eki 2025
- CVE-2026-2183217İzleyin
HCL AION is affected by multiple security vulnerabilities.
OrtaCVSS 4,3İstismar yokEPSS %0hcl software · aion13 Ağu 2026