CWE-187
CWE-187
MITRENo catalog description on file. The MITRE CWE site has the canonical reference.
Recent CVEs
showing 4 of 4- CVE-2016-8615HighEPSS 5%6 h ago
curl/libcurl: cookie injection for other servers
curl - CVE-2026-87853High· 7.5EPSS 0%3 d ago
A flaw was found in SSSD's IdP authentication provider. The eval_access_token_buf() function compares the OIDC subject identifier using strncmp() with the authenticated user's identifier length, performing a prefix comparison instead of an
- CVE-2026-112266Medium· 5.9EPSS 0%5 d ago
SGLang through 0.5.22 contains a denial of service vulnerability that allows API clients to abort other users' in-flight generation requests by supplying a short client-controlled rid. Attackers can submit streaming /generate requests with
- CVE-2026-55602—EPSS 0%2026-06-22
http-proxy-middleware `router` host+path substring matching allows Host-header-driven backend routing bypass
npm
CWE catalog data sourced from MITRE. CVE associations come from NVD weakness mappings; some CVEs carry multiple CWEs.