CWE-777 · 4 kayıt
Regular Expression without Anchors
Bu sınıftaki CVE’ler
4 kayıt
| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
30İzleyin | CVE-2026-40110İstismar yok | jupyter-server CORS origin validation bypass via unanchored regex in allow_origin_patjupyter · jupyter server · CWE-777 | Yüksek7,6 | — | %0,4 | 5 May 2026 |
27İzleyin | CVE-2026-22068İstismar yok | Apache Traffic Server: Regex mappings match with malicious domain namesapache · traffic server · CWE-777 | Orta6,9 | — | %0,6 | 29 Tem 2026 |
25İzleyin | CVE-2026-39087İstismar yok | ntfy before 2.22.0 allows SSRF because of an unanchored regular expression for web push endpoint URLs.ntfy · ntfy · CWE-777 | Orta6,4 | — | %0,4 | 23 Nis 2026 |
21İzleyin | CVE-2026-97736İstismar yok | tinyauth before 5.1.3 allows rule bypass by appending an allowed route string.tinyauth · tinyauth · CWE-777 | Orta5,4 | — | %0,2 | 25 Eyl 2026 |
- CVE-2026-4011030İzleyin
jupyter-server CORS origin validation bypass via unanchored regex in allow_origin_pat
YüksekCVSS 7,6İstismar yokEPSS %0jupyter · jupyter server5 May 2026
- CVE-2026-2206827İzleyin
Apache Traffic Server: Regex mappings match with malicious domain names
OrtaCVSS 6,9İstismar yokEPSS %0apache · traffic server29 Tem 2026
- CVE-2026-3908725İzleyin
ntfy before 2.22.0 allows SSRF because of an unanchored regular expression for web push endpoint URLs.
OrtaCVSS 6,4İstismar yokEPSS %0ntfy · ntfy23 Nis 2026
- CVE-2026-9773621İzleyin
tinyauth before 5.1.3 allows rule bypass by appending an allowed route string.
OrtaCVSS 5,4İstismar yokEPSS %0tinyauth · tinyauth25 Eyl 2026