Skip to content
OpenAdvisories

Weakness (CWE)

CWE-76: Improper Neutralization of Equivalent Special Elements

Base Draft

The product correctly neutralizes certain special elements, but it improperly neutralizes equivalent special elements.

More detail

The product may have a fixed list of special characters it believes is complete. However, there may be alternate encodings, or representations that also have the same meaning. For example, the product may filter out a leading slash (/) to prevent absolute path names, but does not account for a tilde (~) followed by a user name, which on some *nix systems could be expanded to an absolute pathname. Alternately, the product might filter a dangerous "-e" command-line switch when calling an external program, but it might not account for "--exec" or other switches that have the same semantics.

How to prevent it (2 mitigations)

  1. Requirements

    Programming languages and supporting technologies might be chosen which are not subject to these issues.

  2. Implementation

    Utilize an appropriate mix of allowlist and denylist parsing to filter equivalent special element syntax from all input.

Source: MITRE CWE-76

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-28292

    simple-git has blockUnsafeOperationsPlugin bypass via case-insensitive protocol.allow config key that enables RCE

    `simple-git`, an interface for running git commands in any node.js application, has an issue in versions 3.15.0 through 3.32.2 that allows an attacker to bypass two prior CVE fixes (CVE-2022-25860 and CVE-2022-25912) and achieve full remote code execution on …

    steveukx simple-git simple-git npm
  • Critical 9.7
    CVE-2024-34359 EPSS 26%

    llama-cpp-python vulnerable to Remote Code Execution by Server-Side Template Injection in Model Metadata

    llama-cpp-python is the Python bindings for llama.cpp. `llama-cpp-python` depends on class `Llama` in `llama.py` to load `.gguf` llama.cpp or Latency Machine Learning Models. The `__init__` constructor built in the `Llama` takes several parameters to configur…

    abetlen llama-cpp-python llama-cpp-python PyPI
  • Critical 9.8
    CVE-2024-2952

    Server-Side Template Injection in BerriAI/litellm

    BerriAI/litellm is vulnerable to Server-Side Template Injection (SSTI) via the `/completions` endpoint. The vulnerability arises from the `hf_chat_template` method processing the `chat_template` parameter from the `tokenizer_config.json` file through the Jinj…

    BerriAI berriai/litellm litellm PyPI