@bascule that reminds me of the time I noticed in a web server log that occasionally clients would get a 404 after requesting a bizarre URL of the form
https://[hostname]/0.000000E+00username/
which, after some headscratching, I realised was because they had started with
https://[hostname]/~username/
and then %-escaped the tilde
https://[hostname]/%7Eusername/
and then accidentally used that as a printf format string, which took %7E to be a floating-point format directive!