CWE-115: Misinterpretation of Input
Base
The product misinterprets an input, whether from an attacker or another product, in a security-relevant fashion.
Consequences
- Integrity: Unexpected State
Recent advisories
- GHSA-8jr5-v98p-w75m — vLLM: image EXIF Rotation & PNG tRNS Transparency Not Normalized, Causing Mismatch Between Model Input and Expectations
- GHSA-xf8x-j4p2-f749 — Astro allows unauthorized third-party images in _image endpoint
- GHSA-qxp5-gwg8-xv66 — HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net
- GHSA-f9c6-4j9h-6c5r — Misinterpretation of Input in thorsten/phpmyfaq
- GHSA-8cr8-4vfw-mr7h — REXML round-trip instability
- GHSA-h6q6-9hqw-rwfv — Misinterpretation of malicious XML input
- GHSA-4hq8-gmxx-h6w9 — XML Processing error in github.com/crewjam/saml
MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.
Check your repos with MergeHarbor