CWE-684: Incorrect Provision of Specified Functionality

Class

The code does not function according to its published specifications, potentially leading to incorrect usage.

When providing functionality to an external party, it is important that the product behaves in accordance with the details specified. When requirements of nuances are not documented, the functionality may produce unintended behaviors for the caller, possibly leading to an exploitable state.

Consequences

Other: Quality Degradation

How to prevent it

Implementation: Ensure that your code strictly conforms to specifications.

Recent advisories

GHSA-gf9r-m956-97qx — zebrad has consensus divergence via P2SH sigop undercount in pure-Rust disabled-opcode parser
GHSA-fhr3-xh3q-69w6 — uutils coreutils has an Incorrect Provision of Specified Functionality Issue

All advisories for CWE-684

Is this in your code?

MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.

Check your repos with MergeHarbor