CWE-186: Overly Restrictive Regular Expression
Filter
A regular expression is overly restrictive in a way that does not match all intended values.
What the weakness is: CWE-186 at MITRE
Ask an AI about CWE-186
Show the prompt
Explain CWE-186: Overly Restrictive Regular Expression and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/186.html and https://cve.bz/cve/cwe/186?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.
- 5.3CVE-2026-121373
The Symfony HtmlSanitizer component MetaRefreshAttributeSanitizer, introduced to fix CVE-2026-48761, sanitizes the refresh URL of content attributes of meta tags using a regular expression that is too narrow, allowing sanitization to be by…
- 2.1CVE-2026-47241EPSS 0.4%
Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby. Prior to 0.6.5 and 0.5.15, several Net::IMAP commands accept a raw string argument which is only validated to prevent CRLF injection and then sent v…
- 5.3CVE-2025-46821EPSS 0.3%
Envoy is a cloud-native edge/middle/service proxy. Prior to versions 1.34.1, 1.33.3, 1.32.6, and 1.31.8, Envoy's URI template matcher incorrectly excludes the `*` character from a set of valid characters in the URI path. As a result URI pa…