CWE-156: Improper Neutralization of Whitespace
The product receives input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could be interpreted as whitespace when they are sent to a downstream component.
4 tracked CVEs are classified under this weakness.
Highest-risk vulnerabilities
- CVE-2025-6014 — Vault TOTP Secrets Engine Code Reuse
- CVE-2025-6013 — Vault LDAP MFA Enforcement Bypass When Using Username As Alias
- CVE-2025-55001 — OpenBao LDAP MFA Enforcement Bypass When Using Username As Alias
- CVE-2025-55000 — OpenBao TOTP Secrets Engine Enables Code Reuse
Recently published
- CVE-2025-55001 — OpenBao LDAP MFA Enforcement Bypass When Using Username As Alias
- CVE-2025-55000 — OpenBao TOTP Secrets Engine Enables Code Reuse
- CVE-2025-6013 — Vault LDAP MFA Enforcement Bypass When Using Username As Alias
- CVE-2025-6014 — Vault TOTP Secrets Engine Code Reuse