Skip to content
OpenAdvisories

Weakness (CWE)

CWE-358: Improperly Implemented Security Check for Standard

Base Draft

The product does not implement or incorrectly implements one or more security-relevant checks as specified by the design of a standardized algorithm, protocol, or technique.

Source: MITRE CWE-358

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-96760 Public exploit

    Authlib library contains a signature‑verification bypass vulnerability

    Authlib (v1.8.0 and below) contains a signature verification bypass vulnerability. The JsonWebSignature.deserialize_json() method accepts a JSON Serialization JWS object and returns the payload as successfully verified without checking for a signature and wit…

    authlib authlib python-authlib python-authlib Debian Ubuntu PyPI
  • Critical 9.8
    CVE-2018-1270 Public exploit EPSS 78%

    Spring Framework allows applications to expose STOMP over WebSocket endpoints

    Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.15 and older unsupported versions, allow applications to expose STOMP over WebSocket endpoints with a simple, in-memory STOMP broker through the spring-messaging module. A malicious u…

    Spring by Pivotal Spring Framework libspring-java libspring-java Debian Ubuntu Maven