Skip to content
OpenAdvisories

Weakness (CWE)

CWE-625: Permissive Regular Expression

Base Draft

The product uses a regular expression that does not sufficiently restrict the set of allowed values.

How to prevent it (1 mitigation)

  1. Implementation

    When applicable, ensure that the regular expression marks beginning and ending string patterns, such as "/^string$/" for Perl.

Source: MITRE CWE-625

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.6
    CVE-2026-34157 Public exploit

    Wails: wildcardPatternToRegex allows Origin bypass via suffix match in BindingsAllowedOrigins

    Wails is a framework for building desktop applications using Go and web technologies. From 2.0.0 until 2.13.0, BindingsAllowedOrigins in v2/internal/frontend/originvalidator/originValidator.go passes wildcard patterns to wildcardPatternToRegex, which expands …

    wailsapp wails github.com/wailsapp/wails/v2 Go