CWE-475: Undefined Behavior for Input to API

Base

The behavior of this function is undefined unless its control parameter is set to a specific value.

Consequences

Other: Quality Degradation, Varies by Context

Recent advisories

GHSA-gv26-qw3h-8qvp — Open WebUI Allows Viewing of Admin Details
GHSA-7xmc-vhjp-qv5q — Gradio Vulnerable to Denial of Service (DoS) via Crafted Zip Bomb
GHSA-8f8q-q2j7-7j2m — Undefined Behavior in mlflow
GHSA-5wpj-c6f7-24x8 — Undefined behavior when users supply invalid resource handles

Is this in your code?

MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.

Check your repos with MergeHarbor