CWE-147: Improper Neutralization of Input Terminators
The product receives input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could be interpreted as input terminators when they are sent to a downstream component.
A kind of CWE-138 Improper Neutralization of Special Elements.
From the CWE List. © The MITRE Corporation.
Newest
- json-smart json-smart through 2.6.0 Strict-Mode Validation Bypass via 0x1A Character 6.9 Medium
- viewsonic vcast CVE-2026-82989 9.8 Critical
- eclipse jakarta mail, angus mail +1 more Jakarta Mail vulnerable to SMTP Injection 6.0 Medium
- git, debian linux +1 more Newline confusion in credential helpers can lead to credential exfiltration in git 2.1 Low
- git, debian linux +1 more Git does not sanitize URLs when asking for credentials interactively 2.1 Low
- matrix-org matrix-appservice-irc matrix-appservice-irc allows IRC Command injection in provisioning API 5.4 Medium
- liquidfiles HTML and SMTP Injection in LiquidFiles 5.4 Medium
- lettre SMTP command injection in lettre 9.8 Critical