flawfinder vulnerabilities
1 known vulnerability in flawfinder from David-a-wheeler. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
0critical
1high
0exploited
8.7average CVSS score
Latest first
- 8.7 High severity
flawfinder: Improper Neutralization of Special Elements in Output Used by a Downstream Component
Flawfinder is a a static analysis tool for finding vulnerabilities in C/C++ source code. Versions prior to 2.0.20 have an improper input neutralization issue leading to output manipulation, specifically, Terminal/ANSI Escape Sequence Injection and XML Injectio