Skip to content
OpenAdvisories

Weakness (CWE)

CWE-1471: Insufficiently Controlled Parser Differential

Class Incomplete

The product uses a common specification or format that is shared
between multiple components or entities, but the components have
different parsers that can interpret the same input in different,
security-relevant ways.

How to prevent it (1 mitigation)

  1. Architecture and Design, Implementation

    If possible, ensure that the same parser is used by each component.

Source: MITRE CWE-1471

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Medium 5.3
    CVE-2026-126356

    Hono: `validator('form')` skips validation for `multipart/form-data` requests with extra parameters

    Hono is a Web application framework that provides support for any JavaScript runtime. From 4.5.1 until 4.13.16, validator('form') uses a strict whole-header pattern that fails to recognize multipart/form-data when its Content-Type includes another legal param…

    honojs hono hono npm