CWE-755: Improper Handling of Exceptional Conditions

The product does not handle or incorrectly handles an exceptional condition.

Consequences

• Other: Other

Recent advisories

• CVE-2026-109619 — PHP has various global state that temporarily points into request memory.
• CVE-2026-109618 — PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request.
• GHSA-85xf-c7hm-whqw — vLLM: Structured-output request errors escape the request boundary and terminate the shared EngineCore — engine-fatal denial of service (3 sites)
• GHSA-x5rw-q4pp-hg5g — devalue: stringifyAsync can cause an unhandled rejection despite a caught returned promise
• GHSA-w6j9-cwv2-h6wq — PyJWT: Malformed RSA JWK aborts parsing of an entire JWK Set
• GHSA-w5vr-8v7q-w6rv — baseline-browser-mapping process termination on invalid input causes denial of service
• GHSA-74w3-63xv-x9mv — CoreDNS `k8s_external` headless AXFR can emit an empty transfer batch that panics the `transfer` plugin
• GHSA-fhv5-28vv-h8m8 — PyJWKClient unbounded JWKS endpoint requests via attacker-controlled kid values (DoS)
• GHSA-3f6h-2hrp-w5wx — @sveltejs/kit: Unvalidated redirect in handle hook causes Denial-of-Service
• GHSA-xjhv-v822-pf94 — Wasmtime is vulnerable to panic when dropping a `[Typed]Func::call_async` future
• GHSA-gw2x-q739-qhcr — RustFS gRPC GetMetrics deserialization panic enables remote DoS
• GHSA-mjqp-26hc-grxg — Picklescan: ZIP archive scan bypass is possible through non-exhaustive Cyclic Redundancy Check
• GHSA-4h67-722j-5pmc — Wasmtime vulnerable to segfault when using component resources
• GHSA-f46r-rw29-r322 — React Router allows a DoS via cache poisoning by forcing SPA mode
• GHSA-xg58-75qf-9r67 — Cilium's Layer 7 policy enforcement may not occur in policies with wildcarded port ranges

All advisories for CWE-755