Skip to content
OpenAdvisories

Weakness (CWE)

CWE-1038: Insecure Automated Optimizations

Class Draft

The product uses a mechanism that automatically optimizes code, e.g. to improve a characteristic such as performance, but the optimizations can have an unintended side effect that might violate an intended security assumption.

Source: MITRE CWE-1038

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.1
    CVE-2025-48877

    Discourse vulnerable to auto-executing of third-party code in embedded CodePen iframe

    Discourse is an open-source discussion platform. Prior to version 3.4.4 of the `stable` branch, version 3.5.0.beta5 of the `beta` branch, and version 3.5.0.beta6-dev of the `tests-passed` branch, Codepen is present in the default `allowed_iframes` site settin…

    Discourse Discourse
  • High 7.9
    CVE-2022-26861

    Dell BIOS versions contain an Insecure Automated Optimization vulnerability. A local authenticated malicious user could…

    Dell CPG BIOS