CWE-777

4 CVEs classified under CWE-777. Browse by severity and year.

Top CVEs for CWE-777
CVESeverityScorePublishedSummary
CVE-2026-22068High8.22026-07-29Regular Expression without Anchors vulnerability in Apache Traffic Server. This issue affects Apache Traffic Server: from 10.0.X through 10.1.3, from 9.0.X th…
CVE-2026-40110High7.32026-05-05Jupyter Server is the backend for Jupyter web applications. In versions 2.17.0 and earlier, the Origin header validation uses Python's re.match() to check inco…
CVE-2026-39087Medium6.42026-04-23ntfy before 2.22.0 allows SSRF because of an unanchored regular expression for web push endpoint URLs.
CVE-2026-56021Medium5.32026-06-18Webmin allows unauthenticated attackers to read the contents of any file ending in .conf within module directories, due to a bypassable regex pattern.
All CVEs classified under CWE-777 — newest first (page 1 of 1)
CVESeverityScorePublishedSummary
CVE-2026-22068High8.22026-07-29Regular Expression without Anchors vulnerability in Apache Traffic Server. This issue affects Apache Traffic Server: from 10.0.X through 10.1.3, from 9.0.X th…
CVE-2026-56021Medium5.32026-06-18Webmin allows unauthenticated attackers to read the contents of any file ending in .conf within module directories, due to a bypassable regex pattern.
CVE-2026-40110High7.32026-05-05Jupyter Server is the backend for Jupyter web applications. In versions 2.17.0 and earlier, the Origin header validation uses Python's re.match() to check inco…
CVE-2026-39087Medium6.42026-04-23ntfy before 2.22.0 allows SSRF because of an unanchored regular expression for web push endpoint URLs.