CWE-573: Improper Following of Specification by Caller

Class

The product does not follow or incorrectly follows the specifications as required by the implementation language, environment, framework, protocol, or platform.

When leveraging external functionality, such as an API, it is important that the caller does so in accordance with the requirements of the external functionality or else unintended behaviors may result, possibly leaving the system vulnerable to any number of exploits.

Consequences

Other: Quality Degradation, Varies by Context

Recent advisories

GHSA-pvmv-cwg8-v6c8 — Zebra v4.4.0 still accepts V5 SIGHASH_SINGLE without a corresponding output
GHSA-cwfq-rfcr-8hmp — Zebra's Transparent SIGHASH_SINGLE Handling Diverges from zcashd for Corresponding Outputs
GHSA-8m29-fpq5-89jj — Zebra Vulnerable to Consensus Divergence in Transparent Sighash Hash-Type Handling

All advisories for CWE-573

Is this in your code?

MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.

Check your repos with MergeHarbor