Skip to content
Log inStart free trial

CWE-691: Insufficient Control Flow Management

Pillar

The code does not sufficiently manage its control flow during execution, creating conditions in which the control flow can be modified in unexpected ways.

Consequences

  • Other: Alter Execution Logic

Recent advisories

  • RUSTSEC-2026-0379 — Wasmtime: Cranelift backend on aarch64 can jump to incorrect target on large Wasm `br_table` instruction
  • GHSA-vg88-3v92-rjx2 — Vyper: Return inside for loop more than 1 level deep
  • GHSA-3vcg-j39x-cwfm — Vyper's `slice()` may elide side-effects when output length is 0
  • GHSA-qhr6-mgqr-mchm — Vyper's `concat()` builtin may elide side-effects for zero-length arguments

All advisories for CWE-691

Is this in your code?

MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.

Check your repos with MergeHarbor