CWE-150 · Injection and Smuggling
Improper Neutralization of Escape, Meta, or Control Sequences
69CVEs
0exploited
0with a public check
2likely (EPSS 10%+)
SortMost likely exploited
69 CVEs with CWE-150 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2017-0899RubyGems version 2.6.12 and earlier is vulnerable to maliciously crafted gem specifications that include terminal escape characters. Printing the gem specification would execute t…HackerOne · RubyGems · 2017-08-31 | – | 11% | 2017-08-31 |
| CVE-2025-55754Apache Tomcat: console manipulation via escape sequences in log messagesApache Software Foundation · Apache Tomcat · CVSS 9.6 · 2025-10-27 | 9.6 | 10% | 2025-10-27 |
| CVE-2021-25310The administration web interface on Belkin Linksys WRT160NL 1.0.04.002_US_20130619 devices allows remote authenticated attackers to execute system commands with root privileges vi…Belkin · Linksys Wrt160nl Firmware · 2021-02-02 | – | 4.7% | 2021-02-02 |
| CVE-2020-6932An information disclosure and remote code execution vulnerability in the slinger web server of the BlackBerry QNX Software Development Platform versions 6.4.0 to 6.6.0 could allow…BlackBerry · QNX Software Development Platform (SDP) · CVSS 10 · 2020-08-12 | 10.0 | 3.6% | 2020-08-12 |
| CVE-2024-28085wall in util-linux through 2.40, often installed with setgid tty permissions, allows escape sequences to be sent to other users' terminals through argv. (Specifically, escape sequ…Kernel · Util-Linux · CVSS 3.3 · 2024-03-27 | 3.3 | 2.2% | 2024-03-27 |
| CVE-2022-30123A sequence injection vulnerability exists in Rack <2.0.9.1, <2.1.4.1 and <2.2.3.1 which could allow is a possible shell escape in the Lint and CommonLogger components of Rack.Rack Project · https://github.com/rack/rack · 2022-12-05 | – | 2.0% | 2022-12-05 |
| CVE-2023-3265An authentication bypass exists on CyberPower PowerPanel Enterprise by failing to sanitize meta-characters from the username, allowing an attacker to login into the application wi…CyberPower · PowerPanel Enterprise · CVSS 9.8 · 2023-08-14 | 9.8 | 1.6% | 2023-08-14 |
| CVE-2023-26055XWiki Commons may allow privilege escalation to programming rights via user's first namexwiki · xwiki-commons · CVSS 10 · 2023-03-02 | 10.0 | 1.2% | 2023-03-02 |
| CVE-2023-28446Deno is vulnerable to interactive `run` permission prompt spoofing via improper ANSI neutralizationdenoland · deno · CVSS 8.8 · 2023-03-24 | 8.8 | 1.1% | 2023-03-24 |
| CVE-2024-24784Comments in display names are incorrectly handled in net/mailGo standard library · net/mail · CVSS 7.5 · 2024-03-05 | 7.5 | 1.1% | 2024-03-05 |
| CVE-2025-25286Crayfish allows Remote Code Execution via Homarus Authorization headerIslandora · Crayfish · CVSS 9.8 · 2025-02-13 | 9.8 | 1.0% | 2025-02-13 |
| CVE-2024-27936Deno interactive permission prompt spoofing via improper ANSI strippingdenoland · deno · CVSS 8.8 · 2024-03-06 | 8.8 | 0.9% | 2024-03-06 |
| CVE-2025-65082Apache HTTP Server: CGI environment variable overrideApache Software Foundation · Apache HTTP Server · CVSS 6.5 · 2025-12-05 | 6.5 | 0.9% | 2025-12-05 |
| CVE-2021-25743ANSI escape characters in kubectl output are not being filteredKubernetes · Kubernetes · CVSS 3 · 2022-01-07 | 3.0 | 0.8% | 2022-01-07 |
| CVE-2024-33899RARLAB WinRAR before 7.00, on Linux and UNIX platforms, allows attackers to spoof the screen output, or cause a denial of service, via ANSI escape sequences.Rarlab · Winrar · CVSS 7.1 · 2024-04-28 | 7.1 | 0.8% | 2024-04-28 |
| CVE-2024-47252Apache HTTP Server: mod_ssl error log variable escapingApache Software Foundation · Apache HTTP Server · CVSS 7.5 · 2025-07-10 | 7.5 | 0.8% | 2025-07-10 |
| CVE-2024-24785Errors returned from JSON marshaling may break template escaping in html/templateGo standard library · html/template · CVSS 5.4 · 2024-03-05 | 5.4 | 0.8% | 2024-03-05 |
| CVE-2026-64654GitHub CLI: Terminal escape sequence injection in multiple `gh` commandscli · cli · CVSS 5.3 · 2026-08-06 | 5.3 | 0.8% | 2026-08-06 |
| CVE-2024-36052RARLAB WinRAR before 7.00, on Windows, allows attackers to spoof the screen output via ANSI escape sequences, a different issue than CVE-2024-33899.Rarlab · Winrar · CVSS 7.5 · 2024-05-21 | 7.5 | 0.7% | 2024-05-21 |
| CVE-2023-30844Mutagen list and monitor operations do not neutralize control characters in text controlled by remote endpointsmutagen-io · mutagen · CVSS 3 · 2023-05-08 | 3.0 | 0.7% | 2023-05-08 |
| CVE-2024-9774Python-sql: python-sql unary operators does not escape non-expressionNo vendor recorded · CVSS 6.5 · 2024-12-27 | 6.5 | 0.7% | 2024-12-27 |
| CVE-2025-0975IBM MQ code executionIBM · MQ · CVSS 8.8 · 2025-02-28 | 8.8 | 0.7% | 2025-02-28 |
| CVE-2023-40185Shescape on Windows escaping may be bypassed in threaded contextericcornelissen · shescape · CVSS 6.5 · 2023-08-23 | 6.5 | 0.7% | 2023-08-23 |
| CVE-2026-82710Terminal escape sequence injection in mix usage_rules.search_docs via package documentation metadataash-project · usage_rules · CVSS 2.3 · 2026-09-08 | 2.3 | 0.7% | 2026-09-08 |
| CVE-2025-55193Active Record logging vulnerable to ANSI escape injectionrails · rails · CVSS 2.7 · 2025-08-13 | 2.7 | 0.6% | 2025-08-13 |
| CVE-2026-25996Inspektor Gadget uses unsanitized ANSI Escape Sequences In `columns` Output Modeinspektor-gadget · inspektor-gadget · CVSS 6.9 · 2026-02-12 | 6.9 | 0.6% | 2026-02-12 |
| CVE-2026-21521Word Copilot Information Disclosure VulnerabilityMicrosoft · Microsoft 365 Word Copilot · CVSS 7.4 · 2026-01-22 | 7.4 | 0.6% | 2026-01-22 |
| CVE-2026-26149Microsoft Power Apps Desktop Client Spoofing VulnerabilityMicrosoft · Microsoft Power Apps Desktop Client · CVSS 9 · 2026-04-14 | 9.0 | 0.6% | 2026-04-14 |
| CVE-2026-19591OpenAI Codex CLI for Windows, macOS, and Linux and Codex Desktop for Windows and macOS misclassified certain PowerShell commands as safe because their command-safety parser interp…OpenAI · Codex CLI · CVSS 8.8 · 2026-09-01 | 8.8 | 0.6% | 2026-09-01 |
| CVE-2026-82584Terminal escape sequence injection in the mix igniter.install confirmation prompt via package metadataash-project · igniter · CVSS 2.3 · 2026-09-07 | 2.3 | 0.5% | 2026-09-07 |
| CVE-2026-49147App::Ack versions through 3.10.0 for Perl print unsanitised terminal escape sequences from filenames in several output modesPETDANCE · App::Ack · CVSS 7.5 · 2026-07-08 | 7.5 | 0.5% | 2026-07-08 |
| CVE-2025-47284Gardener vulnerable to metadata injection for a project secret that can lead to privilege escalationgardener · gardener · CVSS 9.9 · 2025-05-19 | 9.9 | 0.5% | 2025-05-19 |
| CVE-2026-81856Terminal escape sequence injection in Hex via unneutralized server-supplied outputhexpm · hex · CVSS 2.3 · 2026-10-12 | 2.3 | 0.4% | 2026-10-12 |
| CVE-2026-73035npm-check-updates 23.0.2 Terminal Injection via Unsanitized Escape Sequencesraineorshine · npm-check-updates · CVSS 4.3 · 2026-08-10 | 4.3 | 0.4% | 2026-08-10 |
| CVE-2025-58160Tracing logging user input may result in poisoning logs with ANSI escape sequencestokio-rs · tracing · CVSS 2.3 · 2025-08-29 | 2.3 | 0.3% | 2025-08-29 |
| CVE-2026-102601Flysystem: WhitespacePathNormalizer's control-character (CorruptedPathDetected) check is bypassed by malformed UTF-8 in the path, affecting every adapterthephpleague · flysystem · CVSS 3.5 · 2026-09-29 | 3.5 | 0.3% | 2026-09-29 |
| CVE-2026-21439badkeys vulnerable to ASCII control character injection on console via malformed inputbadkeys · badkeys · CVSS 2 · 2026-01-05 | 2.0 | 0.3% | 2026-01-05 |
| CVE-2024-56201Jinja has a sandbox breakout through malicious filenamespallets · jinja · CVSS 5.4 · 2024-12-23 | 5.4 | 0.3% | 2024-12-23 |
| CVE-2026-3108Terminal Escape Injection in mmctl Report Posts CommandMattermost · Mattermost · CVSS 8 · 2026-03-26 | 8.0 | 0.3% | 2026-03-26 |
| CVE-2025-30089gurk (aka gurk-rs) through 0.6.3 mishandles ANSI escape sequences.boxdot · gurk · CVSS 5.4 · 2025-03-16 | 5.4 | 0.3% | 2025-03-16 |
| CVE-2025-1692MongoDB Shell may be susceptible to control character injection via pastingMongoDB Inc · mongosh · CVSS 6.3 · 2025-02-27 | 6.3 | 0.3% | 2025-02-27 |
| CVE-2026-35651OpenClaw 2026.2.13 < 2026.3.25 - ANSI Escape Sequence Injection in Approval PromptOpenClaw · OpenClaw · CVSS 4.3 · 2026-04-10 | 4.3 | 0.3% | 2026-04-10 |
| CVE-2026-39879SQL injection in syslog-ng SQL destionation driversyslog-ng · syslog-ng · CVSS 7.1 · 2026-07-20 | 7.1 | 0.3% | 2026-07-20 |
| CVE-2023-39342Dangerzone CLI does not sanitize ANSI escape charactersfreedomofpress · dangerzone · CVSS 3.6 · 2023-08-08 | 3.6 | 0.3% | 2023-08-08 |
| CVE-2026-54162Ember: Unneutralised terminal escape/control sequences from Caddy logs injected into the operator's TUIalexandre-daubois · ember · CVSS 4.7 · 2026-10-28 | 4.7 | 0.3% | 2026-10-28 |
| CVE-2025-1693MongoDB Shell may be susceptible to control character Injection via shell outputMongoDB Inc · mongosh · CVSS 3.9 · 2025-02-27 | 3.9 | 0.2% | 2025-02-27 |
| CVE-2026-6019BaseCookie.js_output() does not neutralize embedded charactersPython Software Foundation · CPython · CVSS 2.1 · 2026-04-22 | 2.1 | 0.2% | 2026-04-22 |
| CVE-2026-45803gh: GitHub Actions log output in `gh run view` allows terminal escape sequence injectioncli · cli · CVSS 3.5 · 2026-05-15 | 3.5 | 0.2% | 2026-05-15 |
| CVE-2024-43785gitoxide-core does not neutralize special characters for terminalsByron · gitoxide · CVSS 2.5 · 2024-08-22 | 2.5 | 0.2% | 2024-08-22 |
| CVE-2025-62845QuRouterQNAP Systems Inc. · QuRouter · CVSS 5.6 · 2026-03-20 | 5.6 | 0.2% | 2026-03-20 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.