CWE-173 · Injection and Smuggling
Improper Handling of Alternate Encoding
8CVEs
SortMost likely exploited
8 CVEs with CWE-173 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2019-9636Python 2.7.x through 2.7.16 and 3.x through 3.7.2 is affected by: Improper Handling of Unicode Encoding (with an incorrect netloc) during NFKC normalization. The impact is: Inform…Python · Python · CVSS 5.3 · 2019-03-08 | 5.3 | 7.7% | 2019-03-08 |
| CVE-2026-19611Wildfly-elytron: org.wildfly.security/wildfly-elytron-password-impl: wildfly-elytron: password keyspace reduction via nfkc fullwidth foldingRed Hat · Red Hat Build of Apache Camel 3.33.3.SP2 · CVSS 7.4 · 2026-08-20 | 7.4 | 1.0% | 2026-08-20 |
| CVE-2026-10050Digest authentication lossy encodingEclipse Foundation · Eclipse Jetty - EE8 · CVSS 8.7 · 2026-08-04 | 8.7 | 0.6% | 2026-08-04 |
| CVE-2024-54158In JetBrains YouTrack before 2024.3.52635 potential spoofing attack was possible via lack of Punycode encodingJetBrains · YouTrack · CVSS 3.5 · 2024-12-04 | 3.5 | 0.3% | 2024-12-04 |
| CVE-2026-103276Ghost before 6.20.0 File Read via URL Encoding BypassTryGhost · Ghost · CVSS 5.3 · 2026-10-01 | 5.3 | 0.2% | 2026-10-01 |
| CVE-2023-26303markdown-it-py crash on null assertionsExecutable Books · markdown-it-py · CVSS 3.3 · 2023-02-22 | 3.3 | 0.2% | 2023-02-22 |
| CVE-2023-26302markdown-it-py CLI crash on invalid UTF-8 charactersExecutable Books · markdown-it-py · CVSS 3.3 · 2023-02-22 | 3.3 | 0.2% | 2023-02-22 |
| CVE-2026-81638Non-canonical ULID spellings are accepted and alias to the same record in ash_double_entryash-project · ash_double_entry · CVSS 2.1 · 2026-09-07 | 2.1 | 0.2% | 2026-09-07 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.