CWE-237

Improper Handling of Structural Elements

Parent: CWE-228 - Improper Handling of Syntactically Invalid Structure

The product does not handle or incorrectly handles inputs that are related to complex structures.

4 vulnerabilities with CWE-237
CVE-2026-45411 CRITICAL
vm2: Sandbox Breakout Using Async Generator
CVSS 9.8
CVE-2025-24336 LOW
SXF Common Library - Buffer Overflow
CVSS 3.3
CVE-2023-6110 MEDIUM
python-openstackclient < 6.3.0 - Unauthenticated Access Rule Deletion via Non-Existent Rule Handling
CVSS 5.5
CVE-2023-34429 HIGH
Weintek Weincloud v0.13.6 - Denial of Service via Forged JWT Token
CVSS 7.5
Details
Vulnerabilities 4
Links
MITRE CWE Entry Search this CWE With Exploits