CWE-790: Improper Filtering of Special Elements

Class

The product receives data from an upstream component, but does not filter or incorrectly filters special elements before sending it to a downstream component.

Consequences

Integrity: Unexpected State

Recent advisories

GHSA-f598-mfpv-gmfx — Sequelize - Default support for “raw attributes” when using parentheses

All advisories for CWE-790

Is this in your code?

MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.

Check your repos with MergeHarbor