CWE-838: Inappropriate Encoding for Output Context
The product uses or specifies an encoding when generating output to a downstream component, but the specified encoding is not the same as the encoding that is expected by the downstream component.
7 tracked CVEs are classified under this weakness.
Highest-risk vulnerabilities
- CVE-2026-55858 — MariaDB Connector/J: Inappropriate Encoding for Output Context in org.mariadb.jdbc:mariadb-java-client
- CVE-2026-55859 — MariaDB Connector/R2DBC: Inappropriate Encoding for Output Context and Improper Encoding or Escaping of Output in org.mariadb:r2dbc-mariadb
- CVE-2026-53641 — FOSSBilling has stored XSS in client email views via unescaped content in JavaScript template literal
- CVE-2026-47079 — Round-trip Corruption via Improper Entity Escaping in xml_builder
- CVE-2024-34006 — moodle: unsanitized HTML in site log for config_log_created
Recently published
- CVE-2026-55859 — MariaDB Connector/R2DBC: Inappropriate Encoding for Output Context and Improper Encoding or Escaping of Output in org.mariadb:r2dbc-mariadb
- CVE-2026-55858 — MariaDB Connector/J: Inappropriate Encoding for Output Context in org.mariadb.jdbc:mariadb-java-client
- CVE-2026-47079 — Round-trip Corruption via Improper Entity Escaping in xml_builder
- CVE-2026-53641 — FOSSBilling has stored XSS in client email views via unescaped content in JavaScript template literal
- CVE-2024-34006 — moodle: unsanitized HTML in site log for config_log_created