CWE-1100: Insufficient Isolation of System-Dependent Functions

Base

The product or code does not isolate system-dependent functionality into separate standalone modules.

Consequences

Other: Reduce Maintainability

Recent advisories

GHSA-9qj6-qjgg-37qq — vm2 has sandbox breakout via `neutralizeArraySpeciesBatch`
GHSA-8hg8-63c5-gwmx — vm2 NodeVM `nesting: true` bypasses `require: false` allowing sandbox escape and arbitrary OS command execution
GHSA-c7fq-p62p-wvpc — Open WebUI Has Improper Access Control Leading to Arbitrary Prompt Read
GHSA-vf6q-9f2f-mwhv — Improper network isolation in Hashicorp Nomad

Is this in your code?

MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.

Check your repos with MergeHarbor