Reference page — cumulative record through Wednesday, October 7, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
CWE-625
Weakness type CWE-625 — authoritative definition at MITRE. A cumulative reference aggregating every published CVE mapped to this weakness class; not a page of record.
Totals
| CVEs all-time | CVEs YTD | KEV all-time |
|---|---|---|
| 13 | 13 | 0 |
Monthly trend
▂▄▁██▁
2026-05 1 · 2026-06 2 · 2026-07 0 · 2026-08 5 · 2026-09 5 · 2026-10 0
Top CVEs
| CVE | CVSS | EPSS %ile | KEV | Title |
|---|---|---|---|---|
| CVE-2026-83617 | 8.7 | 45.3 | — | xmldom: requireWellFormed element/attribute name validation is bypassable via an embedd… |
| CVE-2026-83618 | 8.7 | 45.3 | — | xmldom: requireWellFormed DocType publicId/systemId validation is bypassable via an emb… |
| CVE-2026-83609 | 8.7 | 43.7 | — | xmldom: Creation-time XML Name/QName validation is bypassable via an embedded line term… |
| CVE-2026-82726 | 6.3 | 42.5 | — | AshPhoenix get_subdomain maps a crafted or differently-cased Host header to an arbitrar… |
| CVE-2026-55536 | 9.1 | 42.3 | — | Browser Server WebSocket origin validation bypass via unanchored regex (patch bypass of… |
| CVE-2026-40110 | 7.6 | 38.6 | — | jupyter-server CORS origin validation bypass via unanchored regex in allow_origin_pat |
| CVE-2026-64940 | 8.8 | 31.8 | — | — |
| CVE-2026-73845 | 5.3 | 30.2 | — | CKAN MCP Server: MQA server allowlist bypass via unanchored regex (`isValidMqaServer`) |
| CVE-2026-19278 | 6.8 | 25.9 | — | Stackrox: stackrox: privilege escalation via unanchored regular expressions in auth m2m… |
| CVE-2026-79965 | 5.3 | 25.8 | — | — |
| CVE-2026-44587 | 6.1 | 25.0 | — | CarrierWave has a denylisted_content_type bypass via Unescaped Regex Metacharacters |
| CVE-2026-102983 | 6.3 | 21.8 | — | Astro: Netlify Image CDN allowlist bypass enables SSRF |
| CVE-2026-37737 | 6.5 | 13.7 | — | — |
Most-affected vendors
| Vendor | CVEs |
|---|---|
| @xmldom | 3 |
| xmldom | 3 |
| @astrojs | 1 |
| ash-project | 1 |
| carrierwaveuploader | 1 |
| dell | 1 |
| jupyter-server | 1 |
| mervinpraison | 1 |
| nishishi factory | 1 |
| ondata | 1 |
| red hat | 1 |
| withastro | 1 |
