CWE-573

9 published CVEs are weaknesses of this kind, as the records or NVD name it.

Critical 1High 3Medium 4Low 1Not scored 0

CVEs per yearBy the year they were published

CVE-2026-89087
The cstruct package before 6.3.0 for OCaml mishandles indexes.
OCaml · cstruct
High7.3
CVE-2026-59998
sshd in OpenSSH before 10.4 has an undocumented security-relevant behavior: GSSAPIStrictAcceptorCheck has no value if the server is in Windows Active Directory.
OpenBSD · OpenSSH
Medium4.8
CVE-2026-41583
ZEBRA: Consensus Divergence in Transparent Sighash Hash-Type Handling
ZcashFoundation · zebra
Critical9.3
CVE-2026-28498
Authlib: Fail-Open Cryptographic Verification in OIDC Hash Binding
authlib · authlib
High8.2
CVE-2025-69287
BSV Blockchain SDK has an Authentication Signature Data Preparation Vulnerability
bsv-blockchain · ts-sdk
Medium5.4
CVE-2025-69202
axios-cache-interceptor Vulnerable to Cache Poisoning via Ignored HTTP Vary Header
arthurfiorette · axios-cache-interceptor
Medium6.0
CVE-2025-46330
Snowflake Connector for C/C++ retries malformed requests
snowflakedb · libsnowflakeclient
Low3.3
CVE-2025-21601
Junos OS: SRX and EX Series, MX240, MX480, MX960, QFX5120 Series: When web management is enabled for specific services an attacker may cause a CPU spike by sending genuine packets to the device
Juniper Networks · Junos OS
High8.7
CVE-2019-14829
A vulnerability was found in Moodle affection 3.7 to 3.7.1, 3.6 to 3.6.5, 3.5 to 3.5.7 and earlier unsupported versions where activity creation capabilities…
Moodle
Medium4.3