Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

CWE-1100

4 published CVEs are weaknesses of this kind, as the records or NVD name it.

Published CVEs
4
Last 12 months
2
Critical
3
Known exploited
0

Critical 3High 0Medium 1Low 0Not scored 0

CVEs per yearBy the year they were published

  1. 20252
  2. 20262

Newest CVEs

  • CVE-2026-44008

    vm2 has sandbox breakout via `neutralizeArraySpeciesBatch`

    patriksimek · vm2

    Critical9.8
  • CVE-2026-44007

    vm2: nesting: true bypasses require: false, allowing sandbox escape to arbitrary OS command execution

    patriksimek · vm2

    Critical9.1
  • CVE-2025-3466

    Unsanitized Input in langgenius/dify

    langgenius · langgenius/dify

    Critical9.8
  • CVE-2024-9612

    Unauthorized Access in danswer-ai/danswer

    danswer-ai · danswer-ai/danswer

    Medium6.5

Vendors it comes up for most

  1. patriksimek2
  2. danswer-ai1
  3. langgenius1