CWE-223: Omission of Security-relevant Information
Base
The product does not record or display information that would be important for identifying the source or nature of an attack, or determining if an action is safe.
Consequences
- Non-Repudiation: Hide Activities
Recent advisories
- GHSA-r5vf-wf4h-82gg — matrix-sdk-crypto missing facility to signal rotation of a verified cryptographic identity
MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.
Check your repos with MergeHarbor