CWE-436: Interpretation Conflict
Product A handles inputs or steps differently than Product B, which causes A to perform incorrect actions based on its perception of B's state.
A kind of CWE-435 Interaction Error.
From the CWE List. © The MITRE Corporation.
Newest
- benoitc hackneySSRF allowlist bypass via percent-encoded host in hackney6.9 Medium
- goauthentik authentikauthentik: SAML NameID XML Comment Injection Enables Authentication Bypass via Identifier Truncation8.7 High
- pnggroup libpng, libpng-apng +1 moreLIBPNG: Chunk smuggling in push-mode APNG parser via unconsumed chunk body5.4 Medium
- siemens linux-entra-ssolinux-entra-sso: PRT SSO cookie can leak to attacker-controlled hosts when broad host permissions are granted5.3 Medium
- github enterprise serverServer-side request forgery vulnerability in GitHub Enterprise Server notebook viewer via URL parser confusion7.9 High
- flightphp coreFlight: HTTP method override enabled by default enables CSRF escalation and middleware bypass in flightphp/core7.5 High
- gofiber fibergithub.com/gofiber/fiber/v3 cache middleware can mix responses across query parameters6.5 Medium
- dadrus heimdallHeimdall: Authorization bypass via path normalization mismatch7.8 High
- dadrus heimdallHeimdall: Case-sensitive host matching may lead to policy bypass7.8 High
- dadrus heimdallHeimdall: Case-sensitive handling of URL-encoded slashes may lead to inconsistent path interpretation7.8 High
- emilstenstrom justhtmljusthtml before 1.17.0 Multiple Cross-Site Scripting Vulnerabilities5.1 Medium
- @clerk nextjs, nuxt, shared +1 more +3 moreOfficial Clerk JavaScript SDKs: Middleware-based route protection bypass9.1 Critical
- @fastify/middie, fastify fastify\/middie +1 more@fastify/middie vulnerable to middleware bypass via deprecated ignoreDuplicateSlashes option7.4 High
- @fastify/middie, fastify fastify\/middie +1 more@fastify/middie vulnerable to middleware authentication bypass in child plugin scopes9.1 Critical
- fastify @fastify/express, fastify\/express +1 more@fastify/express vulnerable to middleware path doubling causing authentication bypass in child plugin scopes9.1 Critical
- fastify @fastify/express, fastify\/express +1 more@fastify/express vulnerable to middleware authentication bypass via URL normalization gaps (duplicate slashes and semicolons)9.1 Critical
- emilstenstrom justhtmljusthtml before 1.16.0 Multiple Security Issues via Sanitization9.3 Critical
- parse-community parse-serverParse Server has a file upload Content-Type override via extension mismatch2.1 Low
- openclawOpenClaw < 2026.3.31 - Configuration Rehydration via Empty-Array Revocation Handling6.3 Medium
- rackRack: Forwarded Header semicolon injection enables Host and Scheme spoofing4.8 Medium
- rackRack: Multipart Boundary Parsing Ambiguity allowing WAF Bypass3.7 Low
github.com/modelcontextprotocol/go-sdkGoImproper handling of null Unicode character when parsing JSON in github.com/modelcontextprotocol/go-sdk8.2 High- astral astral-tokio-tar, astral-sh tokio-tar +1 moreastral-tokio-tar insufficiently validates PAX extensions during extraction1.7 Low
- openclawOpenClaw < 2026.3.11 - Node-Host Approval UI Mismatch Allows Execution of Unintended Commands7.3 High
openclawnpmOpenClaw: system.run allow-always persistence included shell-commented payload tails5.0 Medium- openclawOpenClaw < 2026.3.7 - Shell Approval Gating Bypass via Dispatch Wrapper Depth Mismatch2.1 Low
- seppmail secure email gateway, seppmail +1 moreHeader Email Address Parsing7.8 High
openclawnpmOpenClaw has exec allowlist/safeBins policy-runtime mismatch via env -S wrapper interpretation5.7 Medium- openclawOpenClaw < 2026.2.24 - Hidden Command Execution via Shell-Wrapper Positional argv Carriers5.8 Medium
- openclawOpenClaw < 2026.2.25 - Approval Identity Mismatch in system.run Command Execution5.7 Medium
openclawnpmOpenClaw: Unicode canonicalization drift in node metadata policy classification could broaden node allowlists6.9 Medium- lfprojects mcp go sdk, modelcontextprotocol go-sdk, red hat migration toolkit for virtualization +3 more +5 moreMCP Go SDK Vulnerable to Improper Handling of Case Sensitivity7.0 High
ficklingPyPIFickling: OBJ opcode call invisibility bypasses all safety checks8.6 High- gitlabInterpretation Conflict in GitLab7.5 High
- sap netweaver application server javaCRLF Injection vulnerability in SAP NetWeaver Application Server Java3.4 Low
- @clerk fastify, red hat enterprise linux ai (rhel ai) 3, openshift ai (rhoai) +3 more +5 moreFastify's Content-Type header tab character allows body validation bypass7.5 High
- vercel next.jsNext.js: Cache poisoning in React Server Component responses5.4 Medium
- traefikTraefik doesn't Prevent Path Normalization Bypass in Router + Middleware Rules6.9 Medium
- digital bazaar forge, node-forge +1 moreCVE-2025-128168.6 High
nodemailerRoot,@rootio/nodemailerRoot +1 moreDuplicate Advisory: Nodemailer: Email to an unintended domain can occur due to Interpretation Conflict7.5 High- astral uv, red hat ai inference server, ai inference server 3.2 +2 more +4 moreUv: uv: specially crafted zip archives lead to arbitrary code execution due to parsing differentials6.3 Medium
- nodemailer, red hat advanced cluster management for kubernetes 2, ceph storage 8.1 +1 more +3 moreNodemailer: nodemailer: email to an unintended domain can occur due to interpretation conflict7.5 High
- astral-sh uvuv is vulnerable to ZIP payload obfuscation through parsing differentials6.8 Medium
- convoypanel panelRatPanel can perform remote command execution without authorization7.7 High
- git, apple xcode, debian linux +2 moreGit allows arbitrary code execution through broken config quoting8.1 High
- phpHeader parser of http stream wrapper does not handle folded headers6.3 Medium
- omniauth saml, onelogin ruby-saml, netapp storagegrid +2 moreRuby SAML vulnerable to SAML authentication bypass due to namespace handling (parser differential)9.3 Critical
- omniauth saml, onelogin ruby-saml, netapp storagegrid +2 moreruby-saml vulnerable to SAML authentication bypass due to DOCTYPE handling (parser differential)9.3 Critical
- codeigniter, codeigniter4 +1 moreCodeIgniter validation of header name and value5.3 Medium
- git-lfsGit LFS permits exfiltration of credentials via crafted HTTP URLs8.5 High
- Show moreLoading…