CWE-177: CWE-177
Yearly Trend
Top Affected Vendors
All CWE-177 CVEs (5)
The @fastify/express plugin vulnerability allows attackers to bypass middleware protection by using URL-encoded characters in paths. This affects appl...
Jan 19, 2026This vulnerability allows attackers to bypass middleware protection in @fastify/middie by using URL-encoded characters in paths. Attackers can access ...
Jan 19, 2026This vulnerability in Hono web framework allows attackers to bypass route-based middleware protections (like authentication) for static files by using...
Mar 4, 2026The curl URL parser incorrectly accepts percent-encoded URL separators like '/' in hostnames, allowing attackers to bypass filters and checks by makin...
Jun 2, 2022This vulnerability involves improper handling of URL encoding (hex encoding) in several QNAP operating system versions, which could allow remote attac...
Dec 6, 2024About CWE-177 (CWE-177)
Our database tracks 5 CVEs classified as CWE-177, with 0 rated critical and 4 rated high severity. The average CVSS score for CWE-177 vulnerabilities is 7.4.
External reference: View CWE-177 on MITRE CWE →
Monitor CWE-177 Vulnerabilities
Get alerted when new CWE-177 CVEs affect your infrastructure.
Start Monitoring Free