Weakness (CWE)
CWE-228: Improper Handling of Syntactically Invalid Structure
Class Incomplete
The product does not handle or incorrectly handles input that is not syntactically well-formed with respect to the associated specification.
Source: MITRE CWE-228
2 results · Clear filters · Feed
-
Low 2.9
IBM Terracotta denial of service
Applications using affected versions of Ehcache 3.x can experience degraded cache-write performance if the application using Ehcache utilizes keys sourced from (malicious) external parties in an unfiltered/unsalted way.
-
Low 2.9
libsql-sqlite3-parser crash due to invalid UTF-8 input
dialect/mod.rs in the libsql-sqlite3-parser crate through 0.13.0 before 14f422a for Rust can crash if the input is not valid UTF-8.