Skip to content
Log inStart free trial

CWE-704: Incorrect Type Conversion or Cast

Class

The product does not correctly convert an object, resource, or structure from one type to a different type.

Consequences

  • Other: Other

Recent advisories

  • GHSA-6pq8-jhm2-2vcw — qs : qs.stringify with arrayFormat 'comma' throws an uncaught TypeError on array elements carrying a non-callable own toString (DoS)
  • EEF-CVE-2026-104634 — beam_mcp: JSON boolean and null tool arguments reach dispatch as strings
  • GHSA-ph72-cqr5-qpp7 — vLLM: Scale-out disaggregated multimodal transport trusts caller-supplied features
  • GHSA-g9hv-x236-4qp3 — Russh: client wrong-length X25519 `clone_from_slice` panic (pre-auth DoS)
  • GHSA-w8wr-v893-vjvp — node-tar: Process crash via PAX numeric path type confusion
  • GHSA-75vm-6w67-gwvp — Coder's OIDC email_verified type coercion bypass enables account takeover via unverified email linking
  • GHSA-q4h4-gmj2-qvw2 — golang.org/x/crypto: Invoking byte arithmetic causes underflow and panic
  • GHSA-83vm-p52w-f9pw — vLLM: extract_hidden_states speculative decoding crashes server on any request with penalty parameters
  • GO-2025-3393 — Mattermost Incorrect Type Conversion or Cast
  • GHSA-pf36-r9c6-h97j — Invalid char to bool conversion when printing a tensor
  • GHSA-h246-cgh4-7475 — `CHECK` fail in `BCast` overflow
  • GHSA-p56j-x44h-g66j — Incorrect Privilege Assignment in Jenkins Script Security Plugin
  • GHSA-46c5-pfj8-fv65 — Improperly checked metadata on tools/armour itemstacks received from the client
  • GHSA-qrpm-p2h7-hrv2 — Exposure of Sensitive Information to an Unauthorized Actor in nanoid
  • GHSA-4c7m-wxvm-r7gc — Improper parsing of octal bytes in netmask

All advisories for CWE-704

Is this in your code?

MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.

Check your repos with MergeHarbor