CWE-791: Incomplete Filtering of Special Elements
The product receives data from an upstream component, but does not completely filter special elements before sending it to a downstream component.
37 tracked CVEs are classified under this weakness.
Highest-risk vulnerabilities
- CVE-2025-0324 — The VAPIX Device Configuration framework allowed a privilege escalation, enabling a lower-privileged user to gain admini
- CVE-2024-47590 — Cross-Site Scripting (XSS) vulnerability in SAP Web Dispatcher
- CVE-2024-39283 — Incomplete filtering of special elements in Intel(R) TDX module software before version TDX_1.5.01.00.592 may allow an a
- CVE-2025-6761 — Kingdee Cloud-Starry-Sky Enterprise Edition Freemarker Engine DynamicForm 4 Action.class plugin.buildMobilePopHtml special elements used in a template engine
- CVE-2026-44232 — dssrf: every IPv6 category bypasses is_url_safe
- CVE-2026-3725 — 1024-lab/lab1024 SmartAdmin FreeMarker Template MailService.java freemarkerResolverContent special elements used in a template engine
- CVE-2025-6518 — PySpur-Dev pyspur Jinja2 Template single_llm_call.py SingleLLMCallNode special elements used in a template engine
- CVE-2025-5325 — zhilink 智互联(深圳)科技有限公司 ADP Application Developer Platform 应用开发者平台 testService special elements used in a template engine
- CVE-2025-2040 — zhijiantianya ruoyi-vue-pro deploy special elements used in a template engine
- CVE-2025-14731 — CTCMS Content Management System Frontend/Template Management CT_Parser.php special elements used in a template engine
- CVE-2025-59303 — HAProxy Kubernetes Ingress Controller before 3.1.13, when the config-snippets feature flag is used, accepts config snipp
- CVE-2026-11998 — AngularJS XSS via SCE resource URL sanitization bypass
- CVE-2026-7164 — pf can overflow the stack parsing crafted SCTP packets
- CVE-2026-3714 — OpenCart Incomplete Fix CVE-2024-36694 template.php save special elements used in a template engine
- CVE-2026-2969 — datapizza-labs datapizza-ai Jinja2 Template prompt.py ChatPromptTemplate special elements used in a template engine
- CVE-2026-86206 — Access control filter bypass allows unauthorised access to APIs
- CVE-2026-48208 — Denial-of-Service via SVG Rendering in Ticket
- CVE-2025-9094 — ThingsBoard Add Gateway special elements used in a template engine
- CVE-2024-39899 — PrivateBin allows shortening of URLs for other domains
- CVE-2025-3841 — wix-incubator jam Jinja2 Template jam.py special elements used in a template engine
Recently published
- CVE-2026-86206 — Access control filter bypass allows unauthorised access to APIs
- CVE-2026-78140 — Dromara UJCMS web-file-template Endpoint WebFileTemplateController.java update special elements in template engine
- CVE-2026-75979 — xianrendzw EasyReport SQL Preview Endpoint DesignerController.java previewSqlText special elements in template engine
- CVE-2026-19929 — OpenBoxes Template Processing DocumentController.groovy buildZebraTemplate special elements in template engine
- CVE-2026-18632 — langgenius dify Jinja2 jinja2_transformer.py jinja2.Template special elements used in a template engine
- CVE-2026-11998 — AngularJS XSS via SCE resource URL sanitization bypass
- CVE-2026-48208 — Denial-of-Service via SVG Rendering in Ticket
- CVE-2026-9498 — Dromara lamp-cloud Message Template GroovyClassLoader.parseClass special elements used in a template engine
- CVE-2026-8740 — Sanluan PublicCMS templateResult API TemplateResultDirective.java execute special elements used in a template engine
- CVE-2026-44232 — dssrf: every IPv6 category bypasses is_url_safe
- CVE-2026-7164 — pf can overflow the stack parsing crafted SCTP packets
- CVE-2026-6984 — AstrBotDevs AstrBot Dashboard API t2i.py create_template special elements used in a template engine
- CVE-2026-5987 — Sanluan PublicCMS FreeMarker Template AbstractFreemarkerView.java AbstractFreemarkerView.doRender special elements used in a template engine
- CVE-2026-5559 — AntaresMugisho PyBlade AST Validation sandbox.py _is_safe_ast special elements used in a template engine
- CVE-2026-3725 — 1024-lab/lab1024 SmartAdmin FreeMarker Template MailService.java freemarkerResolverContent special elements used in a template engine
- CVE-2026-3714 — OpenCart Incomplete Fix CVE-2024-36694 template.php save special elements used in a template engine
- CVE-2026-2969 — datapizza-labs datapizza-ai Jinja2 Template prompt.py ChatPromptTemplate special elements used in a template engine
- CVE-2025-14731 — CTCMS Content Management System Frontend/Template Management CT_Parser.php special elements used in a template engine
- CVE-2025-59303 — HAProxy Kubernetes Ingress Controller before 3.1.13, when the config-snippets feature flag is used, accepts config snipp
- CVE-2025-9094 — ThingsBoard Add Gateway special elements used in a template engine