Common Weakness Enumeration

    CWE Definition / CWE-777

    CWE-777: Regular Expression without Anchors

    The product uses a regular expression to perform neutralization, but the regular expression is not anchored and may allow malicious or malformed data to slip through.

    Published:30 Jun 2009
    Organization:MITRE
    Modified:11 Dec 2025

    Related Weakness

    CWE-625: Permissive Regular Expression