CWE-436: Interpretation Conflict
Product A handles inputs or steps differently than Product B, which causes A to perform incorrect actions based on its perception of B's state.
A kind of CWE-435 Interaction Error.
From the CWE List. © The MITRE Corporation.
Newest
- apache software foundation sling engine Apache Sling Engine: Hand-rolled parameter parser diverges from RFC/container parsing, enabling smuggling No score
- kyverno Kyverno 1.19.1 before 1.19.2 Privilege Escalation via Policy apiCall urlPath 9.4 Critical
- sensiolabs symfony Symfony: HtmlSanitizer allowLinkHosts() / allowMediaHosts() Bypass via URLs Without a Well-Formed Authority (Incomplete Fix for CVE-2026-45066) 2.3 Low
- sensiolabs symfony Symfony: Host Placeholders Can Match the Start of the Path in Compiled URL Matchers, Bypassing Path-Based Access Control 6.3 Medium
-
libcgi-pm-perlDebian,perl-CGIAzure Linux +1 more CGI versions before 5.00 for Perl allow form fields to be smuggled past proxies and WAFs via multipart parsing that differs from the RFCs No score - google chrome Security issue in Platform in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to... 8.8 High
- @fastify/http-proxy @fastify/http-proxy vulnerable to prefix escape via decoded route parameters 9.1 Critical
- @clerk nuxt Nuxt 4.6.0 before 4.6.2 Route Param Confusion via getRouterParam 6.3 Medium
- bytebase dbhub DBHub: MySQL and MariaDB comment interpretation bypasses read-only SQL validation 6.1 Medium
- @clerk nuxt, @nuxt nitro-server +1 more Nuxt: Dot segments in the request path bypass `server/middleware` path checks and server route rules on page routes 6.5 Medium
- digitalbazaar forge Forge: X.509 basicConstraints bypass in verifyCertificateChain() via deprecated extension OIDs 2.5.29.10 and 2.5.29.13 7.4 High
-
libmime-tools-perlDebian,perl-MIME-toolsopenSUSE +1 more MIME::Field::ParamVal versions before 5.521 for Perl do not flag a duplicate boundary parameter whose name contains a nested comment 5.3 Medium -
libmime-tools-perlDebian,perl-MIME-toolsopenSUSE +1 more MIME::Field::ParamVal versions before 5.521 for Perl turn an RFC 2231 filename with a hyphenated language tag into an empty recommended filename 5.3 Medium -
libmime-tools-perlDebian,perl-MIME-toolsopenSUSE +1 more MIME::Head versions from 5.518 before 5.521 for Perl decode a partly encoded multipart boundary without flagging the parse as ambiguous 5.3 Medium -
libmime-tools-perlDebian,perl-MIME-toolsopenSUSE +1 more MIME::Field::ParamVal versions before 5.521 for Perl do not flag an ambiguous multipart boundary written as RFC 2231 continuations 5.3 Medium -
libmime-tools-perlDebian,perl-MIME-toolsopenSUSE +1 more MIME::Field::ParamVal versions before 5.521 for Perl allow one invalid Content-Type parameter to hide the parameters after it, including the multipart boundary 5.3 Medium - rgrove crass Crass: Incorrect tokenization of bad URLs enables CSS sanitizer bypass 5.3 Medium
- @fastify/express @fastify/express vulnerable to path-scoped middleware bypass via absolute-form request targets 9.1 Critical
- zip-rs zip2 zip: Critical Parser Differential & Security Control Bypass via Dual-Header Inconsistencies (Zip Cloaking) Leading to Arbitrary File Overwrite & RCE 10.0 Critical
- benoitc hackney SSRF allowlist bypass via percent-encoded bracketed IPv6 or trailing-dot IP literal in hackney 6.9 Medium
- cthackers adm-zip adm-zip through 0.6.1 Duplicate-Entry Validation Bypass via Canonically Equivalent Names 6.3 Medium
- nodemailer Nodemailer 3.0.0 before 10.1.4 Address Parsing Bypass via Nested Comments 8.3 High
- traefik Traefik before 2.11.58 and 3.7.13 mTLS Bypass via Negated Host Matcher 6.9 Medium
- @clerk nuxt Nuxt: Route rules are matched against the raw request path, so a percent-encoded segment can bypass `appMiddleware` on dynamic and catch-all routes 6.5 Medium
- apache software foundation brpc Apache bRPC: Access Control Bypass via HTTP Request Paths Containing Empty Path Segments 7.5 High
- vyperlang vyper Vyper through 0.5.0b1 Literal Value Manipulation via Line Separators 6.0 Medium
- @fastify/middie @fastify/middie vulnerable to path-scoped middleware bypass via scope prefix mismatch 9.1 Critical
- fast-uri fast-uri vulnerable to host confusion via unchecked WHATWG host canonicalization 4.8 Medium
-
libcpanel-json-xs-perlDebian,perl-Cpanel-JSON-XSMageia +1 more Cpanel::JSON::XS versions from 4.42 before 4.80 for Perl let input chunking change the decoded value of top-level numbers in incr_parse 7.5 High - nodemailer Nodemailer before 10.0.13 Improper Input Validation via Angle-Bracket Address Comments 6.9 Medium
- f5 nginx javascript NGINX ngx_http_js_module vulnerability 8.3 High
- roocode roo code, roocodeinc roo-code +1 more Roo-Code through 3.54.0 Auto-Approve Bypass via Command Substitution at Command Position 7.7 High
- roocode roo code, roocodeinc roo-code +1 more Roo-Code through 3.54.0 Auto-Approve Bypass via Funsub Command Substitution 7.7 High
- roocode roo code, roocodeinc roo-code +1 more Roo-Code through 3.54.0 Auto-Approve Bypass via Quote Masking Desynchronization 7.7 High
- roocode roo code, roocodeinc roo-code +1 more Roo-Code through 3.54.0 Auto-Approve Bypass via Redirect Operator Stripping 7.7 High
- mistralai mistral-vibe Mistral Vibe < 2.25.4 Bash Permission Bypass via ${var@P} Prompt-Transform 8.7 High
- mistralai mistral-vibe Mistral Vibe < 2.25.5 Permission Bypass via Bash Line Continuation 8.7 High
- jovancoding network-ai Network-AI 5.14.0 before 5.15.2 Deny Pattern Bypass via ClaudeHookBridge extractFullTarget 7.5 High
- open-webui Open WebUI 0.11.0 before 0.11.4 Denial of Service via Automation Recurrence Rules 7.1 High
- getkin kin-openapi kin-openapi: ValidationHandler security-requirement bypass via encoded-path operation confusion 7.4 High
- mongodb c++ driver Query and rename target confusion via embedded NUL truncation in MongoDB C++ Driver 6.0 Medium
- corazawaf coraza Coraza from 3.0.4 before 3.8.1 Request Body Inspection Bypass via Content-Type 6.9 Medium
- corazawaf coraza Coraza before 3.8.1 Multipart filename* Charset Handling FILES Rule Bypass 6.3 Medium
- corazawaf coraza OWASP Coraza WAF: Cookie Parser Confusion 4.0 Medium
- corazawaf coraza OWASP Coraza WAF: ProcessURI silently drops QUERY_STRING and ARGS_GET on URI parse failure — defense-in-depth bypass for non-net/http integrations 4.0 Medium
- corazawaf coraza Coraza 3.0.0 before 3.8.1 WAF Bypass via JSON Key Collision 6.9 Medium
- @backstage plugin-techdocs-node, backstage, linuxfoundation backstage plugin-techdocs-node +2 more Backstage: Bypass of MkDocs configuration sanitizer in TechDocs backend 7.7 High
- owasp-modsecurity modsecurity ModSecurity: RFC 2231 `filename*` Parameter Bypasses Multipart Filename Rules on RFC-Compliant Backends (Go, Python, Node, Java) 8.6 High
- cthackers adm-zip adm-zip before 0.6.1 Duplicate ZIP Entry Name Validation Bypass 8.2 High
- nestjs nest Nest: Remote process termination via a deeply nested microservice message pattern 7.5 High
- Show olderLoading…