CWE-164: Improper Neutralization of Internal Special Elements
Filter
The product receives input from an upstream component, but it does not neutralize or incorrectly neutralizes internal special elements that could be interpreted in unexpected ways when they are sent to a downstream component.
What the weakness is: CWE-164 at MITRE. All weaknesses
Ask an AI about CWE-164
Show the prompt
Explain CWE-164: Improper Neutralization of Internal Special Elements and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/164.html and https://cve.bz/cve/cwe/164?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.
- 9.9CVE-2026-19072EPSS 0.4%
Velociraptor stores the compiled VQL in the hunt object internally to avoid having to recompile the artifacts for each endpoint in the hunt. Although the field "compiled_collector_args" is an internal field, Velociraptor allowed the field …
- 6.5CVE-2025-30177EPSS 1.3%
Bypass/Injection vulnerability in Apache Camel in Camel-Undertow component under particular conditions. This issue affects Apache Camel: from 4.10.0 before 4.10.3, from 4.8.0 before 4.8.6. Users are recommended to upgrade to version 4.10…
- 4.8CVE-2025-29891EPSS 76%
Bypass/Injection vulnerability in Apache Camel. This issue affects Apache Camel: from 4.10.0 before 4.10.2, from 4.8.0 before 4.8.5, from 3.10.0 before 3.22.4. Users are recommended to upgrade to version 4.10.2 for 4.10.x LTS, 4.8.5 for …