Skip to content
OpenAdvisories

Weakness (CWE)

CWE-1046: Creation of Immutable Text Using String Concatenation

Base Incomplete

The product creates an immutable text string using string concatenation operations.

Source: MITRE CWE-1046

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High 7.5
    CVE-2026-42499

    Quadratic string concatenation in consumePhrase in net/mail

    Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322.

    Go standard library net/mail go stdlib Debian Ubuntu Alpine Go
  • Medium 4.2
    CVE-2026-23955

    EVerest vulnerable to concatenation of strings literal and integers

    EVerest is an EV charging software stack. Prior to version 2025.9.0, in several places, integer values are concatenated to literal strings when throwing errors. This results in pointers arithmetic instead of printing the integer value as expected, like most o…

    EVerest everest-core