CWE-777
CVEs classified under CWE-777, newest first.
2 CVEsRSS
CVE-2026-97736Medium· 5.4tinyauth before 5.1.3 allows rule bypass by appending an allowed route string
tinyauth before 5.1.3 allows rule bypass by appending an allowed route string. This is caused by an unanchored regular expression.
▾ Sunlittinyauth · github.com/tinyauthapp/tinyauthEPSS 0.21%via NVD
CVE-2026-39087Medium· 6.4ntfy before 2.22.0 allows SSRF because of an unanchored regular expression for web push endpoint URLs.
ntfy before 2.22.0 allows SSRF because of an unanchored regular expression for web push endpoint URLs.
▾ SunlitEPSS 0.27%via NVD