CWE-625

CWE-625 · 3 records · 1 with a public proof-of-concept

Records the NVD classes under CWE-625, highest CVSS first.

  1. HIGH 8.2CVE-2026-148142026-10-13

    GitLab has remediated an issue in GitLab CE/EE affecting all versions before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed a user to poison cached responses for raw repository files, causing targeted user…

    gitlab

    AI risk analysis on Exploit-DB.ai →

  2. UNSCOREDCVE-2026-1189952026-10-30

    CallBackery versions before 0.62.0 for Perl accept unintended values in form fields checked by createRxValidator. createRxValidator() is documented to anchor the supplied pattern at both ends, but builds /^${rx}$/ without grouping the pattern. An alternation …

    AI risk analysis on Exploit-DB.ai →

  3. UNSCOREDCVE-2026-102983public PoC2026-09-30

    Astro is a web framework for content-driven websites. From 5.2.0 until 8.2.4, the @astrojs/netlify adapter generates regular expressions for Netlify Image CDN remote-image allowlists without anchoring them to the beginning of the URL. Because Netlify evaluates…

    AI risk analysis on Exploit-DB.ai →