CWE-116: Improper Encoding or Escaping of Output
The product prepares a structured message for communication with another component, but encoding or escaping of the data is either missing or done incorrectly. As a result, the intended structure of the message is not preserved.
Also known as Output Sanitization, Output Validation, Output Encoding.
A kind of CWE-707 Improper Neutralization.
From the CWE List. © The MITRE Corporation.
Newest
- hkuds vibe-tradingHKUDS Vibe-Trading 0.1.0 before 0.1.7 Indirect Prompt Injection RCE via BashTool and BackgroundRunTool8.7 High
- mispMISP: JavaScript Injection via Remote Tag ID in Event Preview Inline Handler4.8 Medium
- nvidia geforce, guest driver, rtx, quadro, nvs +2 more +4 moreNVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where a...4.4 Medium
- vercel satori, next +1 moreSatori-generated SVG has improper escaping5.3 Medium
- google chromeImproper output encoding in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote...8.3 High
- glpi-project glpiGLPI: Stored XSS in suppliers8.5 High
- zammadZammad: Microsoft Graph error logs expose partially masked OAuth access tokens5.1 Medium
- cstigler node-xhtml-purifierxhtml-purifier has HTML attribute-injection (sanitizer bypass) that leads to XSS6.1 Medium
- klever-io klever-goKlever-Go: Elasticsearch bulk / painless injection via on-chain account name -> explorer/indexer data forgery8.4 High
- mispMISP Reflected XSS via Unvalidated Object Type in AnalystData Overmind Thread4.8 Medium
- warp-tech warpgateWarpgate: x-warpgate-username Header Not Stripped from Client Requests Enables Identity Spoofing to WebSocket Backend Targets4.9 Medium
- jgraph drawiodraw.io: Stored XSS on file open via editable=0 sibling cell — patch bypass of CVE-2026-466426.1 Medium
- synology diskstation manager (dsm)An improper encoding or escaping of output vulnerability in Auth API in Synology DiskStation...5.3 Medium
- synology diskstation manager (dsm)An improper encoding or escaping of output vulnerability in SCGI in Synology DiskStation Manager ...9.8 Critical
- givanz vvvebVvveb: Stored XSS via sanitizeHTML() bypass in user profile bio field7.6 High
- djust-org djustdjust: A template binding inherits a context safety grant it never earned (XSS)2.3 Low
djustPyPIdjust: Six template-layer defects emit attacker-controlled markup unescaped (XSS)No score- functional software, inc. sentry seerSentry Seer vulnerability allows attacker-controlled input to be executed in a privileged environment9.8 Critical
- rabbitmq amqp091-goRabbitMQ amqp091-go: Connection Configuration Overwrite via Unsanitized TLS Path Parameter Injection8.7 High
- unknown royal addons for elementorRoyal Elementor Addons < 1.7.1067 - Unauthenticated Stored HTML Injection in Form Notification Emails6.1 Medium
- arista networks eosOn affected platforms running Arista EOS with password authentication configured, a specially crafted password can create orphan authentication sessions. Repeated exploitation of this issue can exhaus…6.9 Medium
- apache software foundation syncopeApache Syncope: CSV export spreadsheet formula injection7.3 High
- angularAngular: SSR XSS via Unescaped <template> Content Across DocumentFragment Boundaries in Fallback Raw-Content Elements8.6 High
- angularAngular: SSR XSS via Unescaped Processing Instruction (<?...?>) Nodes in Fallback Raw-Content Elements8.6 High
- mispMISP: Unescaped HTML Injection in PDF Report Element Rendering5.1 Medium
- nationalsecurityagency skills-serviceNationalSecurityAgency/skills-service has Stored XSS via User Registration Enabling Admin Account Takeover9.6 Critical
- dell secure connect gateway 5.0 - appliance, secure connect gateway 5.0 - application, secure connect gateway +2 moreDell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior...5.3 Medium
- dell secure connect gateway 5.0 - appliance, secure connect gateway 5.0 - application, secure connect gateway +2 moreDell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior...5.3 Medium
- google chromeImproper encoding or escaping of output in CSS in Google Chrome prior to 153.0.8010.36 allowed a...4.3 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows server 2012 +12 more +14 moreActive Directory Certificate Services (AD CS) Elevation of Privilege Vulnerability7.8 High
- ash-project ash authentication oauth2 serverash_authentication_oauth2_server interpolates a tenant-derived value into the WWW-Authenticate challenge without escaping, allowing header parameter injection6.3 Medium
- fast-urifast-uri vulnerable to authority injection via an unvalidated port in serialize7.5 High
- jenkinsJenkins 2.579 and earlier, LTS 2.568.2 and earlier does not escape map keys when serializing...4.3 Medium
- eclipse foundation dittoIn Eclipse Ditto versions [1.3.0, 3.9.6], the ImplicitThingCreationMessageMapper of the connectivity service builds a CreateThing command by substituting placeholder values (e.g. {{ header:device_id }…7.6 High
- @xmldom xmldomxmldom: XML fragment injection via invalid EntityReference.nodeName during requireWellFormed serialization6.3 Medium
- ellite wallosWallos: iCalendar Injection via CRLF in Subscription Name/Notes Export4.6 Medium
- ash-project ash adminQuery-parameter injection in AshAdmin row-action links via unencoded string primary keys2.0 Low
- org.mariadb r2dbc-mariadb, mariadb-corporation mariadb-connector-r2dbc +1 moreMariaDB Connector/R2DBC: Inappropriate Encoding for Output Context and Improper Encoding or Escaping of Output in org.mariadb:r2dbc-mariadb5.9 Medium
- mariadb-corporation mariadb-connector-nodejsMariaDB Connector/Node.js: Possible SQL injection in Buffer parameter escaping under big5/gbk/sjis/cp932/gb18030 client charsets6.5 Medium
- privatebinPrivateBin: Reflected JSON injection in backend responses via unescaped REQUEST_URI0.0 None
- gitoxidelabs gitoxidegitoxide before 0.38.2 Credential Helper Protocol Field Injection2.3 Low
- mongodb c++ driver, c\+\+ driver +1 moreCross-tenant database retargeting via dot/NUL injection in namespace strings in the C++ Driver8.6 High
- jahlives openssl encryptopenssl_encrypt before 1.4.9 Text Injection via Recovery Slot Metadata9.3 Critical
- nvidia openshellNVIDIA OpenShell for Linux contains a vulnerability in its inference proxy, where an attacker...5.2 Medium
- govcert-lu eml parsereml_parser: URL extraction bypass via HTML entities in URLs6.5 Medium
- kepano defuddleDefuddle: XSS via unescaped attribute interpolation in site extractors8.2 High
- unleashUnleash: Global Mustache.escape override disables HTML escaping process-wide, enabling Slack/Teams link-injection via unrestricted username4.1 Medium
- apache cloudstackApache CloudStack: Cross-Site Scripting (XSS) Vulnerability in Instance Reset Password Function in UI9.1 Critical
- apache cloudstackApache CloudStack: Cross-Site Scripting (XSS) Vulnerability in Lock User Function in UI4.8 Medium
- laravel-backpack crudbackpack/crud: OS command injection in Stats::makeCurlRequest via attacker-controlled Host header (pre-auth)8.1 High
- Show moreLoading…