CWE-75: Special Element Injection

The product does not adequately filter user-controlled input for special elements with control implications.

19 tracked CVEs are classified under this weakness.

Highest-risk vulnerabilities

CVE-2026-29042 — Nuclio Shell Runtime Command Injection Leading to Privilege Escalation
CVE-2026-31908 — Apache APISIX: forward auth plugin allows header injection
CVE-2024-58362 — SurrealDB before 1.5.5 Query Injection via RPC API
CVE-2026-54771 — Langroid: handle_message() executes user-supplied tool JSON without sender verification
CVE-2025-61911 — python-ldap has sanitization bypass in ldap.filter.escape_filter_chars
CVE-2024-9940 — Calculated Fields Form <= 5.2.45 - HTML Injection
CVE-2025-50213 — Apache Airflow Providers Snowflake: Potential SQL injection in CopyFromExternalStageToSnowflakeOperator

CVE-2024-58362 — SurrealDB before 1.5.5 Query Injection via RPC API
CVE-2026-54771 — Langroid: handle_message() executes user-supplied tool JSON without sender verification
CVE-2026-31908 — Apache APISIX: forward auth plugin allows header injection
CVE-2026-29042 — Nuclio Shell Runtime Command Injection Leading to Privilege Escalation
CVE-2025-61911 — python-ldap has sanitization bypass in ldap.filter.escape_filter_chars
CVE-2025-50213 — Apache Airflow Providers Snowflake: Potential SQL injection in CopyFromExternalStageToSnowflakeOperator
CVE-2024-9940 — Calculated Fields Form <= 5.2.45 - HTML Injection