CWE-440: Expected Behavior Violation

Base

A feature, API, or function does not perform according to its specification.

Consequences

Other: Quality Degradation, Varies by Context

Recent advisories

GHSA-8988-9cw3-xx77 — urllib3: HTTPS proxy TLS configuration may be ignored or overridden
GHSA-rxmx-g7hr-8mx4 — OpenClaw: Zalo replay dedupe keys could suppress messages across chats or senders
GHSA-q9p4-hw9m-fj2v — Apollo Router vulnerable to Critical Regression In Query Plan Cache
GHSA-9hxf-ppjv-w6rq — gRPC connection termination issue
GHSA-cfgp-2977-2fmm — Connection confusion in gRPC
GHSA-9hg2-395j-83rm — Expected Behavior Violation in Apache Tomcat

Is this in your code?

MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.

Check your repos with MergeHarbor