Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

CWE-1389

6 published CVEs are weaknesses of this kind, as the records or NVD name it.

Published CVEs
6
Last 12 months
4
Critical
0
Known exploited
0

Critical 0High 2Medium 3Low 1Not scored 0

CVEs per yearBy the year they were published

  1. 20242
  2. 20264

Newest CVEs

  • CVE-2026-69257

    Flowise: SSRF Protection Bypass via IPv4-Mapped IPv6 Addresses

    FlowiseAI · Flowise

    High7.6
  • CVE-2026-47160

    Vaultwarden: Server-side request forgery (SSRF) via Icon Endpoint Decimal/Hex/Octal IP Bypass

    dani-garcia · vaultwarden

    Medium5.8
  • CVE-2026-50131

    Fedify has an incomplete SSRF mitigation after GHSA-p9cg-vqcc-grcx: validatePublicUrl allows special-use IPv4 ranges

    fedify-dev · fedify

    High8.6
  • CVE-2018-25242

    One Search 1.1.0.0 Denial of Service

    OneSearch · One Search

    Medium6.9
  • CVE-2024-26015

    An incorrect parsing of numbers with different radices vulnerability [CWE-1389] in FortiProxy version 7.4.3 and below, version 7.2.10 and below, version 7.0.17…

    Fortinet · FortiProxy

    Low3.1
  • CVE-2024-6284

    Improper IPv4 and IPv6 byte order storage in github.com/google/nftables

    Google · https://github.com/google/nftables

    Medium6.3

Vendors it comes up for most

  1. FlowiseAI1
  2. Fortinet1
  3. Google1
  4. OneSearch1
  5. dani-garcia1
  6. fedify-dev1