deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-43805
Published: 2023-01-01
Description: Rejected reason: To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used.
CVE: CVE-2022-43806
Published: 2023-01-01
Description: Rejected reason: To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used.
CVE: CVE-2022-43807
Published: 2023-01-01
Description: Rejected reason: To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used.
CVE: CVE-2022-43808
Published: 2023-01-01
Description: Rejected reason: To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used.
CVE: CVE-2022-43809
Published: 2023-01-01
Description: Rejected reason: To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used.
CVE: CVE-2022-43810
Published: 2023-01-01
Description: Rejected reason: To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used.
CVE: CVE-2022-43811
Published: 2023-01-01
Description: Rejected reason: To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used.
CVE: CVE-2022-43812
Published: 2023-01-01
Description: Rejected reason: To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used.
CVE: CVE-2022-43813
Published: 2023-01-01
Description: Rejected reason: To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used.
CVE: CVE-2022-43814
Published: 2023-01-01
Description: Rejected reason: To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used.
CVE: CVE-2022-43815
Published: 2023-01-01
Description: Rejected reason: To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used.
CVE: CVE-2022-43816
Published: 2023-01-01
Description: Rejected reason: To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used.
CVE: CVE-2022-43817
Published: 2023-01-01
Description: Rejected reason: To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used.
CVE: CVE-2022-43818
Published: 2023-01-01
Description: Rejected reason: To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used.
CVE: CVE-2022-43819
Published: 2023-01-01
Description: Rejected reason: To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used.
CVE: CVE-2022-43820
Published: 2023-01-01
Description: Rejected reason: To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used.
CVE: CVE-2022-43821
Published: 2023-01-01
Description: Rejected reason: To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used.
CVE: CVE-2022-43822
Published: 2023-01-01
Description: Rejected reason: To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used.
CVE: CVE-2022-43823
Published: 2023-01-01
Description: Rejected reason: To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used.
CVE: CVE-2022-43824
Published: 2023-01-01
Description: Rejected reason: To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used.
CVE: CVE-2022-43825
Published: 2023-01-01
Description: Rejected reason: To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used.
CVE: CVE-2022-43826
Published: 2023-01-01
Description: Rejected reason: To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used.
CVE: CVE-2022-43827
Published: 2023-01-01
Description: Rejected reason: To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used.
CVE: CVE-2022-43828
Published: 2023-01-01
Description: Rejected reason: To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used.
CVE: CVE-2022-43829
Published: 2023-01-01
Description: Rejected reason: To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used.
CVE: CVE-2022-43830
Published: 2023-01-01
Description: Rejected reason: To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used.
CVE: CVE-2023-0028
Published: 2023-01-01
Description: Cross-site Scripting (XSS) - Stored in GitHub repository linagora/twake prior to 2023.Q1.1200+.


CVSS Score: 5.7 (MEDIUM)
CWE: CWE-79
References: https://github.com/linagora/Twake/pull/2678/commits/c0708c397e199c68cea0db9f59d29d7dbdcdde7b; https://huntr.dev/bounties/bfd935f4-2d1d-4d3f-8b59-522abe7dd065; https://github.com/linagora/Twake/pull/2678/commits/c0708c397e199c68cea0db9f59d29d7dbdcdde7b
CVE: CVE-2021-41823
Published: 2023-01-01
Description: The Web Application Firewall (WAF) in Kemp LoadMaster 7.2.54.1 allows certain uses of onmouseover to bypass an XSS protection mechanism.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://pastebin.com/kpx9Nvbf; https://pastebin.com/kpx9Nvbf
CVE: CVE-2022-47952
Published: 2023-01-01
Description: lxc-user-nic in lxc through 5.0.1 is installed setuid root, and may allow local users to infer whether any file exists, even within a protected directory tree, because "Failed to open" often indicates that a file does not exist, whereas "does not refer to a network namespace path" often indicates that a file exists. NOTE: this is different from CVE-2018-6556 because the CVE-2018-6556 fix design was based on the premise that "we will report back to the user that the open() failed but the user has no way of knowing why it failed"; however, in many realistic cases, there are no plausible reasons for failing except that the file does not exist.
CVSS Score: 3.3 (LOW)
CWE: CWE-203, CWE-203
References: https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/1783591/comments/45; https://github.com/MaherAzzouzi/CVE-2022-47952; https://github.com/lxc/lxc/blob/0b83d71c2c8f3bac9503f894cd84584f79258bb3/lxc.spec.in#L274
CVE: CVE-2022-48198
Published: 2023-01-01
Description: The ntpd_driver component before 1.3.0 and 2.x before 2.2.0 for Robot Operating System (ROS) allows attackers, who control the source code of a different node in the same ROS application, to change a robot's behavior. This occurs because a topic name depends on the attacker-controlled time_ref_topic parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-668, CWE-668
References: https://github.com/vooon/ntpd_driver/compare/1.2.0...1.3.0; https://github.com/vooon/ntpd_driver/compare/2.1.0...2.2.0; https://github.com/vooon/ntpd_driver/issues/9
CVE: CVE-2022-34322
Published: 2023-01-01
Description: Multiple XSS issues were discovered in Sage Enterprise Intelligence 2021 R1.1 that allow an attacker to execute JavaScript code in the context of users' browsers. The attacker needs to be authenticated to reach the vulnerable features. An issue is present in the Notify Users About Modification menu and the Notifications feature. A user can send malicious notifications and execute JavaScript code in the browser of every user who has enabled notifications. This is a stored XSS, and can lead to privilege escalation in the context of the application. (Another issue is present in the Favorites tab. The name of a favorite or a folder of favorites is interpreted as HTML, and can thus embed JavaScript code, which is executed when displayed. This is a self-XSS.)
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-79, CWE-79
References: https://www.synacktiv.com/sites/default/files/2022-12/sage_sei_multiple_xss.pdf; https://www.synacktiv.com/sites/default/files/2022-12/sage_sei_multiple_xss.pdf
CVE: CVE-2022-34323
Published: 2023-01-01
Description: Multiple XSS issues were discovered in Sage XRT Business Exchange 12.4.302 that allow an attacker to execute JavaScript code in the context of other users' browsers. The attacker needs to be authenticated to reach the vulnerable features. An issue is present in the Filters and Display model features (OnlineBanking > Web Monitoring > Settings > Filters / Display models). The name of a filter or a display model is interpreted as HTML and can thus embed JavaScript code, which is executed when displayed. This is a stored XSS. Another issue is present in the Notification feature (OnlineBanking > Configuration > Notifications and alerts > Alerts *). The name of an alert is interpreted as HTML, and can thus embed JavaScript code, which is executed when displayed. This is a stored XSS. (Also, an issue is present in the File download feature, accessible via /OnlineBanking/cgi/isapi.dll/DOWNLOADFRS. When requesting to show the list of downloadable files, the contents of three form fields are embedded in the JavaScript code without prior sanitization. This is essentially a self-XSS.)
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.synacktiv.com/sites/default/files/2022-12/sage_xrt_multiple_xss.pdf; https://www.synacktiv.com/sites/default/files/2022-12/sage_xrt_multiple_xss.pdf
CVE: CVE-2022-34324
Published: 2023-01-01
Description: Multiple SQL injections in Sage XRT Business Exchange 12.4.302 allow an authenticated attacker to inject malicious data in SQL queries: Add Currencies, Payment Order, and Transfer History.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89, CWE-89
References: https://www.synacktiv.com/sites/default/files/2022-12/sage_xrt_multiple_sqli_1.pdf; https://www.synacktiv.com/sites/default/files/2022-12/sage_xrt_multiple_sqli_1.pdf
CVE: CVE-2022-37785
Published: 2023-01-01
Description: An issue was discovered in WeCube Platform 3.2.2. Cleartext passwords are displayed in the configuration for terminal plugins.
CVSS Score: 7.5 (HIGH)
CWE: CWE-312, CWE-312
References: https://github.com/WeBankPartners/wecube-platform/issues/2329; https://github.com/WeBankPartners/wecube-plugins-terminal; https://github.com/WeBankPartners/wecube-platform/issues/2329
CVE: CVE-2022-37786
Published: 2023-01-01
Description: An issue was discovered in WeCube Platform 3.2.2. There are multiple CSV injection issues: the [Home / Admin / Resources] page, the [Home / Admin / System Params] page, and the [Home / Design / Basekey Configuration] page.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-1236, CWE-1236
References: https://github.com/WeBankPartners/wecube-platform; https://github.com/WeBankPartners/wecube-platform/issues/2327; https://github.com/WeBankPartners/wecube-platform
CVE: CVE-2022-37787
Published: 2023-01-01
Description: An issue was discovered in WeCube platform 3.2.2. A DOM XSS vulnerability has been found on the plugin database execution page.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/WeBankPartners/wecube-platform; https://github.com/WeBankPartners/wecube-platform/issues/2328; https://github.com/WeBankPartners/wecube-platform
CVE: CVE-2022-40711
Published: 2023-01-01
Description: PrimeKey EJBCA 7.9.0.2 Community allows stored XSS in the End Entity section. A user with the RA Administrator role can inject an XSS payload to target higher-privilege users.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://verneet.com/cve-2022-40711/; https://verneet.com/cve-2022-40711/
CVE: CVE-2022-45027
Published: 2023-01-01
Description: perfSONAR before 4.4.6, when performing participant discovery, incorrectly uses an HTTP request header value to determine a local address.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-918, CWE-918
References: https://www.perfsonar.net/releasenotes-2022-11-09-4-4-6.html; https://zxsecurity.co.nz/research/advisories/perfsonar-multiple/; https://www.perfsonar.net/releasenotes-2022-11-09-4-4-6.html
CVE: CVE-2022-45213
Published: 2023-01-01
Description: perfSONAR before 4.4.6 inadvertently supports the parse option for a file:// URL.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-73
References: https://www.perfsonar.net/releasenotes-2022-11-09-4-4-6.html; https://zxsecurity.co.nz/research/advisories/perfsonar-multiple/; https://www.perfsonar.net/releasenotes-2022-11-09-4-4-6.html
CVE: CVE-2022-47634
Published: 2023-01-01
Description: M-Link Archive Server in Isode M-Link R16.2v1 through R17.0 before R17.0v24 allows non-administrative users to access and manipulate archive data via certain HTTP endpoints, aka LINK-2867.
CVSS Score: 8.1 (HIGH)
CWE: CWE-284
References: https://www.isode.com/support/security/advisory/m-link-incorrect-access-control-vulnerability-21-12-2022.html; https://www.isode.com/support/security/advisory/m-link-incorrect-access-control-vulnerability-21-12-2022.html
CVE: CVE-2014-125030
Published: 2023-01-01
Description: A vulnerability, which was classified as critical, has been found in taoeffect Empress. Affected by this issue is some unknown functionality. The manipulation leads to use of hard-coded password. The patch is identified as 557e177d8a309d6f0f26de46efb38d43e000852d. It is recommended to apply a patch to fix this issue. VDB-217154 is the identifier assigned to this vulnerability.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-259, CWE-798
References: https://github.com/taoeffect/empress/commit/557e177d8a309d6f0f26de46efb38d43e000852d; https://github.com/taoeffect/empress/pull/61; https://vuldb.com/?ctiid.217154
CVE: CVE-2018-25062
Published: 2023-01-01
Description: A vulnerability classified as problematic has been found in flar2 ElementalX up to 6.x on Nexus 9. Affected is the function xfrm_dump_policy_done of the file net/xfrm/xfrm_user.c of the component ipsec. The manipulation leads to denial of service. Upgrading to version 7.00 is able to address this issue. The name of the patch is 1df72c9f0f61304437f4f1037df03b5fb36d5a79. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-217152.
CVSS Score: 3.5 (LOW)
CWE: CWE-404
References: https://github.com/flar2/ElementalX-N9/commit/1df72c9f0f61304437f4f1037df03b5fb36d5a79; https://vuldb.com/?ctiid.217152; https://vuldb.com/?id.217152
CVE: CVE-2018-25063
Published: 2023-01-01
Description: A vulnerability classified as problematic was found in Zenoss Dashboard up to 1.3.4. Affected by this vulnerability is an unknown functionality of the file ZenPacks/zenoss/Dashboard/browser/resources/js/defaultportlets.js. The manipulation of the argument HTMLString leads to cross site scripting. The attack can be launched remotely. Upgrading to version 1.3.5 is able to address this issue. The identifier of the patch is f462285a0a2d7e1a9255b0820240b94a43b00a44. It is recommended to upgrade the affected component. The identifier VDB-217153 was assigned to this vulnerability.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://github.com/zenoss/ZenPacks.zenoss.Dashboard/commit/f462285a0a2d7e1a9255b0820240b94a43b00a44; https://github.com/zenoss/ZenPacks.zenoss.Dashboard/pull/130; https://github.com/zenoss/ZenPacks.zenoss.Dashboard/releases/tag/1.3.5
CVE: CVE-2023-0029
Published: 2023-01-01
Description: A vulnerability was found in Multilaser RE708 RE1200R4GC-2T2R-V3_v3411b_MUL029B. It has been rated as problematic. This issue affects some unknown processing of the component Telnet Service. The manipulation leads to denial of service. The attack may be initiated remotely. The identifier VDB-217169 was assigned to this vulnerability.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-404
References: https://vuldb.com/?ctiid.217169; https://vuldb.com/?id.217169; https://www.youtube.com/watch?v=yh0pK7YlmI4
CVE: CVE-2010-10002
Published: 2023-01-01
Description: ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability classified as problematic has been found in SimpleSAMLphp simplesamlphp-module-openid. Affected is an unknown function of the file templates/consumer.php of the component OpenID Handler. The manipulation of the argument AuthState leads to cross site scripting. It is possible to launch the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. Upgrading to version 1.0 is able to address this issue. The patch is identified as d652d41ccaf8c45d5707e741c0c5d82a2365a9a3. It is recommended to upgrade the affected component. VDB-217170 is the identifier assigned to this vulnerability. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.
CVSS Score: 3.1 (LOW)
CWE: CWE-79
References: https://github.com/simplesamlphp/simplesamlphp-module-openid/commit/d652d41ccaf8c45d5707e741c0c5d82a2365a9a3; https://github.com/simplesamlphp/simplesamlphp-module-openid/releases/tag/v1.0; https://vuldb.com/?ctiid.217170
CVE: CVE-2013-10006
Published: 2023-01-01
Description: A vulnerability classified as problematic was found in Ziftr primecoin up to 0.8.4rc1. Affected by this vulnerability is the function HTTPAuthorized of the file src/bitcoinrpc.cpp. The manipulation of the argument strUserPass/strRPCUserColonPass leads to observable timing discrepancy. The complexity of an attack is rather high. The exploitation appears to be difficult. Upgrading to version 0.8.4rc2 is able to address this issue. The patch is named cdb3441b5cd2c1bae49fae671dc4a496f7c96322. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-217171.
CVSS Score: 2.6 (LOW)
CWE: CWE-208, CWE-203
References: https://github.com/Ziftr/primecoin/commit/cdb3441b5cd2c1bae49fae671dc4a496f7c96322; https://github.com/Ziftr/primecoin/releases/tag/v0.8.4rc2; https://vuldb.com/?ctiid.217171
CVE: CVE-2015-10006
Published: 2023-01-01
Description: A vulnerability, which was classified as problematic, has been found in admont28 Ingnovarq. Affected by this issue is some unknown functionality of the file app/controller/insertarSliderAjax.php. The manipulation of the argument imagetitle leads to cross site scripting. The attack may be launched remotely. The name of the patch is 9d18a39944d79dfedacd754a742df38f99d3c0e2. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-217172.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://github.com/admont28/ingnovarq/commit/9d18a39944d79dfedacd754a742df38f99d3c0e2; https://vuldb.com/?ctiid.217172; https://vuldb.com/?id.217172
CVE: CVE-2023-22551
Published: 2023-01-01
Description: The FTP (aka "Implementation of a simple FTP client and server") project through 96c1a35 allows remote attackers to cause a denial of service (memory consumption) by engaging in client activity, such as establishing and then terminating a connection. This occurs because malloc is used but free is not.
CVSS Score: 7.5 (HIGH)
References: https://github.com/rovinbhandari/FTP/issues/8; https://github.com/rovinbhandari/FTP/issues/8
CVE: CVE-2021-4297
Published: 2023-01-01
Description: A vulnerability has been found in trampgeek jobe up to 1.6.4 and classified as problematic. This vulnerability affects the function runs_post of the file application/controllers/Restapi.php. The manipulation of the argument sourcefilename leads to an unknown weakness. Upgrading to version 1.6.5 is able to address this issue. The patch is identified as 694da5013dbecc8d30dd83e2a83e78faadf93771. It is recommended to upgrade the affected component. VDB-217174 is the identifier assigned to this vulnerability.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-276
References: https://github.com/trampgeek/jobe/commit/694da5013dbecc8d30dd83e2a83e78faadf93771; https://github.com/trampgeek/jobe/issues/46; https://vuldb.com/?ctiid.217174
CVE: CVE-2014-125031
Published: 2023-01-02
Description: A vulnerability was found in kirill2485 TekNet. It has been classified as problematic. Affected is an unknown function of the file pages/loggedin.php. The manipulation of the argument statusentery leads to cross site scripting. It is possible to launch the attack remotely. The name of the patch is 1c575340539f983333aa43fc58ecd76eb53e1816. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-217176.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://github.com/kirill2485/TekNet/commit/1c575340539f983333aa43fc58ecd76eb53e1816; https://vuldb.com/?ctiid.217176; https://vuldb.com/?id.217176
CVE: CVE-2014-125032
Published: 2023-01-02
Description: A vulnerability was found in porpeeranut go-with-me. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file module/frontend/add.php. The manipulation leads to sql injection. The identifier of the patch is b92451e4f9e85e26cf493c95ea0a69e354c35df9. It is recommended to apply a patch to fix this issue. The identifier VDB-217177 was assigned to this vulnerability.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-89
References: https://github.com/porpeeranut/go-with-me/commit/b92451e4f9e85e26cf493c95ea0a69e354c35df9; https://vuldb.com/?ctiid.217177; https://vuldb.com/?id.217177
CVE: CVE-2014-125033
Published: 2023-01-02
Description: A vulnerability was found in rails-cv-app. It has been rated as problematic. Affected by this issue is some unknown functionality of the file app/controllers/uploaded_files_controller.rb. The manipulation with the input ../../../etc/passwd leads to path traversal: '../filedir'. The exploit has been disclosed to the public and may be used. The patch is identified as 0d20362af0a5f8a126f67c[PII_REDACTED]8484a863. It is recommended to apply a patch to fix this issue. VDB-217178 is the identifier assigned to this vulnerability.
CVSS Score: 3.5 (LOW)
CWE: CWE-24, CWE-22
References: https://github.com/bertrand-caron/rails-cv-app/commit/0d20362af0a5f8a126f67c[PII_REDACTED]8484a863; https://vuldb.com/?ctiid.217178; https://vuldb.com/?id.217178
CVE: CVE-2016-15006
Published: 2023-01-02
Description: A vulnerability, which was classified as problematic, has been found in enigmaX up to 2.2. This issue affects the function getSeed of the file main.c of the component Scrambling Table Handler. The manipulation leads to predictable seed in pseudo-random number generator (prng). The attack may be initiated remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. Upgrading to version 2.3 is able to address this issue. The identifier of the patch is 922bf90ca14a681629ba0b807a997a81d70225b5. It is recommended to upgrade the affected component. The identifier VDB-217181 was assigned to this vulnerability.
CVSS Score: 3.7 (LOW)
CWE: CWE-337
References: https://github.com/pfmonville/enigmaX/commit/922bf90ca14a681629ba0b807a997a81d70225b5; https://github.com/pfmonville/enigmaX/releases/tag/2.3; https://vuldb.com/?ctiid.217181
CVE: CVE-2021-4298
Published: 2023-01-02
Description: A vulnerability classified as critical has been found in Hesburgh Libraries of Notre Dame Sipity. This affects the function SearchCriteriaForWorksParameter of the file app/parameters/sipity/parameters/search_criteria_for_works_parameter.rb. The manipulation leads to sql injection. Upgrading to version 2021.8 is able to address this issue. The patch is named d1704c7363b899ffce65be03a796a0ee5fdbfbdc. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-217179.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-89
References: https://github.com/ndlib/sipity/commit/d1704c7363b899ffce65be03a796a0ee5fdbfbdc; https://github.com/ndlib/sipity/releases/tag/v2021.8; https://vuldb.com/?ctiid.217179
CVE: CVE-2021-4299
Published: 2023-01-02
Description: A vulnerability classified as problematic was found in cronvel string-kit up to 0.12.7. This vulnerability affects the function naturalSort of the file lib/naturalSort.js. The manipulation leads to inefficient regular expression complexity. The attack can be initiated remotely. Upgrading to version 0.12.8 is able to address this issue. The name of the patch is 9cac4c298ee92c1695b0695951f1488884a7ca73. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-217180.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-1333
References: https://github.com/cronvel/string-kit/commit/9cac4c298ee92c1695b0695951f1488884a7ca73; https://github.com/cronvel/string-kit/releases/tag/v0.12.8; https://vuldb.com/?ctiid.217180