Skip to content
OpenAdvisories

Weakness (CWE)

CWE-228: Improper Handling of Syntactically Invalid Structure

Class Incomplete

The product does not handle or incorrectly handles input that is not syntactically well-formed with respect to the associated specification.

Source: MITRE CWE-228

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 10.0
    CVE-2026-87986

    An arbitrary code execution vulnerability in Mistral Vibe allows an attacker to bypass command permission checks using …

    mistralai mistral-vibe
  • Critical 9.3
    CVE-2020-26290

    Critical security issues in XML encoding in Dex

    Dex is a federated OpenID Connect provider written in Go. In Dex before version 2.27.0 there is a critical set of vulnerabilities which impacts users leveraging the SAML connector. The vulnerabilities enables potential signature bypass due to issues with XML …

    dexidp dex github.com/russellhaering/goxmldsig github.com/dexidp/dex Go