CWE-1038: Insecure Automated Optimizations

ClassLikelihood of exploit: Low

The product uses a mechanism that automatically optimizes code, e.g. to improve a characteristic such as performance, but the optimizations can have an unintended side effect that might violate an intended security assumption.

Consequences

Integrity: Alter Execution Logic

Recent advisories

GHSA-3wwx-63fv-pfq6 — Cilium's CIDR deny policies may not take effect when a more narrow CIDR allow is present

All advisories for CWE-1038

Is this in your code?

MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.

Check your repos with MergeHarbor