CWE-1023: Incomplete Comparison with Missing Factors

Class

The product performs a comparison between entities that must consider multiple factors or characteristics of each entity, but the comparison does not include one or more of these factors.

Consequences

Integrity, Access Control: Alter Execution Logic, Bypass Protection Mechanism

Recent advisories

GHSA-gxg4-2rrr-jhc7 — OpenClaw: Hostname checks could treat trailing-dot hosts inconsistently
GHSA-x5qj-865h-mgvm — Symfony: HtmlSanitizer UrlAttributeSanitizer Misses URL Attributes
GHSA-77q5-rr5v-x43q — OpenClaw: Trusted retry endpoint checks could match hostname prefixes
CVE-2026-7473 — On affected platforms running Arista EOS where a tunnel decapsulation configuration—such as VXLAN (Virtual Extensible LAN), decap-groups, or a GRE (Generic…
GHSA-923m-gv2p-w5qp — Django: has_vary_header may expose cached responses when Vary values contain whitespace
GHSA-c65p-x677-fgj6 — vLLM has a Weakness in MultiModalHasher Image Hashing Implementation

All advisories for CWE-1023

Is this in your code?

MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.

Check your repos with MergeHarbor