CWE-157: Failure to Sanitize Paired Delimiters
low-riskThe product does not properly handle the characters that are used to mark the beginning and ending of a group of entities, such as parentheses, brackets, and braces.
Abstraction: Variant
Common Consequences
Integrity
→
Unexpected State
Real-World Examples (2)
| CVE | CVSS | EPSS | KEV |
|---|---|---|---|
| CVE-2025-25286 | 9.8 | 4.4% | — |
| CVE-2026-25063 | 7.8 | 0.0% | — |
0
/ 100
low-risk
Active Threat
0/50 · Minimal
Exploit Availability
0/50 · Minimal