CWE-625

CVEs per yearBy the year they were published

1. 20181
2. 20201
3. 20241
4. 202621

Newest CVEs

• CVE-2026-120645

  CGI versions before 5.00 for Perl allow denial of service via submitted values used as a regex for optgroup selection in scrolling_list

  CGI

  Not scored
• CVE-2026-120631

  CGI::Cookie versions from 4.67 before 5.00 for Perl allow denial of service via the client cookie expires value used as a regex in parse

  CGI

  Not scored
• CVE-2026-118995

  CallBackery versions before 0.62.0 for Perl accept unintended values in form fields checked by createRxValidator

  CallBackery

  Not scored
• CVE-2026-14814

  Permissive Regular Expression in GitLab

  GitLab · GitLab

  High8.2
• CVE-2026-102983

  Astro: Netlify Image CDN allowlist bypass enables SSRF

  withastro · astro

  Medium6.3
• CVE-2026-79965

  Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an External Control of Critical State…

  Dell · Secure Connect Gateway 5.0 - Application

  Medium5.3
• CVE-2026-83618

  xmldom: requireWellFormed DocType publicId/systemId validation is bypassable via an embedded line terminator

  xmldom · xmldom

  High8.7
• CVE-2026-83617

  xmldom: requireWellFormed element/attribute name validation is bypassable via an embedded line terminator

  xmldom · xmldom

  High8.7
• CVE-2026-83609

  xmldom: Creation-time XML Name/QName validation is bypassable via an embedded line terminator, allowing injection on the default serialization path

  xmldom · xmldom

  High8.7
• CVE-2026-82726

  AshPhoenix get_subdomain maps a crafted or differently-cased Host header to an arbitrary tenant

  ash-project · ash_phoenix

  Medium6.3

Vendors it comes up for most

1. @xmldom3
2. xmldom3
3. Red Hat2
4. rack2
5. @astrojs1
6. Dell1
7. GitLab1
8. Google1
9. MervinPraison1
10. Microsoft1