Vulnerability in David-a-wheeler Flawfinder
CVE-2026-48813
Flawfinder is a a static analysis tool for finding vulnerabilities in C/C++ source code. Versions prior to 2.0.20 have an improper input neutralization issue leading to output manipulation, specifically, Terminal/ANSI Escape Sequence Injec…
Affected products
- David-a-wheeler Flawfinder — versions < 2.0.20
Weakness classification (CWE)
Public proof-of-concept exploits
References
- security-advisories@github.com (x_refsource_CONFIRM)
Frequently asked questions
- What is CVE-2026-48813?
- CVE-2026-48813 is a vulnerability in David-a-wheeler Flawfinder, classified under Improper Neutralization of Special Elements in Output Used by a Downstream Component (Injection). Published 2026-08-11.
- Is CVE-2026-48813 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.