CWE-150: ANSI injection
The product receives input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could be interpreted as escape, meta, or control character sequences when they are sent to a downstream component.
Also known as Improper Neutralization of Escape, Meta, or Control Sequences.
A kind of CWE-138 Improper Neutralization of Special Elements.
From the CWE List. © The MITRE Corporation.
Newest
- openclawOpenClaw 2026.2.13 < 2026.3.25 - ANSI Escape Sequence Injection in Approval Prompt5.3 Medium
aws/aws-sdk-phpPackagistAWS SDK for PHP has CloudFront Policy Document Injection via Special Characters7.7 High- mattermost, mattermost server +1 moreTerminal Escape Injection in mmctl Report Posts Command8.0 High
- qnap qurouterQuRouter5.6 Medium
- linuxfoundation inspektor gadget, inspektor-gadget +1 moreInspektor Gadget uses unsanitized ANSI Escape Sequences In `columns` Output Mode6.9 Medium
- tanium appliance, tanos +1 moreTanium addressed an unauthorized code execution vulnerability in Tanium Appliance.7.8 High
- microsoft 365 word copilotWord Copilot Information Disclosure Vulnerability7.4 High
- axllent mailpitMailpit has SMTP Header Injection via Regex Bypass5.3 Medium
- badkeysbadkeys vulnerable to ASCII control character injection on console via malformed input2.0 Low
- apache http serverApache HTTP Server: CGI environment variable override6.5 Medium
- charmbracelet soft-serveSoft Serve does not sanitize ANSI escape sequences in user input4.6 Medium
- apache tomcat, siemens simatic cn 4100 +1 moreApache Tomcat: console manipulation via escape sequences in log messages9.6 Critical
- tokio-rs tracingTracing logging user input may result in poisoning logs with ANSI escape sequences2.3 Low
- railsActive Record logging vulnerable to ANSI escape injection2.7 Low
- apache http serverApache HTTP Server: mod_ssl error log variable escaping7.5 High
- gardenerGardener vulnerable to metadata injection for a project secret that can lead to privilege escalation9.9 Critical
- apache tomcatApache Tomcat: Bypass of rules in Rewrite Valve9.8 Critical
- busyboxIn netstat in BusyBox through 1.37.0, local users can launch of network application with an argv...2.5 Low
- boxdot gurkgurk (aka gurk-rs) mishandles ANSI escape sequences5.4 Medium
- ibm mq, mq appliance +1 moreIBM MQ code execution8.8 High
- mongodb mongoshMongoDB Shell may be susceptible to control character Injection via shell output3.9 Low
- mongodb mongoshMongoDB Shell may be susceptible to control character injection via pasting6.3 Medium
islandora/crayfishPackagistCrayfish Allows Remote Code Execution via hypercube X-Islandora-Args Header9.5 Critical- islandora crayfishCrayfish allows Remote Code Execution via Homarus Authorization header9.8 Critical
- gitThe sideband payload is passed unfiltered to the terminal in git7.5 High
- git, debian linux +1 moreNewline confusion in credential helpers can lead to credential exfiltration in git2.1 Low
- git, debian linux +1 moreGit does not sanitize URLs when asking for credentials interactively2.1 Low
- casid jteHTML templates containing Javascript template strings are subject to XSS in jte6.1 Medium
- pallets jinjaJinja has a sandbox breakout through malicious filenames5.4 Medium
python-sqlDebian,python-python-sqlopenSUSE +1 morePython-sql: python-sql unary operators does not escape non-expression6.5 Medium- byron gitoxidegitoxide-core does not neutralize special characters for terminals2.5 Low
- rarlab winrarRARLAB WinRAR before 7.00, on Windows, allows attackers to spoof the screen output via ANSI...7.5 High
- filips123 pwasforfirefoxArbitrary code execution due to improper sanitization of web app properties in PWAsForFirefox9.7 Critical
- rarlab winrar, unrar +1 moreRARLAB WinRAR before 7.00, on Linux and UNIX platforms, allows attackers to spoof the screen...7.1 High
- debian linux, kernel util-linux, siemens ruggedcom rox mx5000 +13 more +15 morewall in util-linux through 2.40, often installed with setgid tty permissions, allows escape...3.3 Low
- deno, deno runtime +1 moreDeno interactive permission prompt spoofing via improper ANSI stripping8.8 High
- ericcornelissen shescapeShescape on Windows escaping may be bypassed in threaded context6.5 Medium
- cyberpower powerpanel enterprise, powerpanel server +1 moreAn authentication bypass exists on CyberPower PowerPanel Enterprise by failing to sanitize meta...9.8 Critical
- freedom dangerzoneDangerzone CLI does not sanitize ANSI escape characters3.6 Low
- mutagen, mutagen compose +1 moreMutagen list and monitor operations do not neutralize control characters in text controlled by remote endpoints3.0 Low
- denoDeno is vulnerable to interactive `run` permission prompt spoofing via improper ANSI neutralization8.8 High
- xwiki commons, xwiki-commons +1 moreXWiki Commons may allow privilege escalation to programming rights via user's first name10.0 Critical
- suse rancher, wrangler +1 moreRancher/Wrangler: Denial of service when processing Git credentials5.9 Medium
- rack project rack, debian linux +1 morePossible shell escape sequence injection vulnerability in Rack10.0 Critical
- kubernetesANSI escape characters in kubectl output are not being filtered3.0 Low
- ipfs go-ipfsControl character injection in console output6.8 Medium
- belkin linksys wrt160nl firmware, linksys wrt 160nl +1 more** UNSUPPORTED WHEN ASSIGNED ** The administration web interface on Belkin Linksys WRT160NL 1.0...8.8 High
- blackberry qnx software development platform, qnx software development platform (sdp) +1 moreAn information disclosure and remote code execution vulnerability in the slinger web server of...10.0 Critical
- hackerone rubygems, debian linux, redhat enterprise linux desktop +5 more +7 moreRubyGems Code Injection vulnerability9.8 Critical
- xfree86, xfree86 project x11r6 +1 moreThe xterm terminal emulator in XFree86 4.2.0 and earlier allows attackers to modify the window...7.5 High