CWE-1046: Creation of Immutable Text Using String Concatenation
Base
The product creates an immutable text string using string concatenation operations.
When building a string via a looping feature (e.g., a FOR or WHILE loop), the use of += to append to the existing string will result in the creation of a new object with each iteration, which can be inefficient in comparison with use of text buffer data elements.
Consequences
- Other: Reduce Performance
Recent advisories
- GO-2026-4977 — Quadratic string concatenation in consumePhrase in net/mail
MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.
Check your repos with MergeHarbor