Skip to content
OpenAdvisories

Weakness (CWE)

CWE-459: Incomplete Cleanup

Base Draft

The product does not properly "clean up" and remove temporary or supporting resources after they have been used.

How to prevent it (1 mitigation)

  1. Architecture and Design, Implementation

    Temporary files and other supporting resources should be deleted/released immediately after they are no longer needed.

Source: MITRE CWE-459

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.7
    CVE-2026-3304 Public exploit

    Multer vulnerable to Denial of Service via incomplete cleanup

    Multer is a node.js middleware for handling `multipart/form-data`. A vulnerability in Multer prior to version 2.1.0 allows an attacker to trigger a Denial of Service (DoS) by sending malformed requests, potentially causing resource exhaustion. Users should up…

    expressjs multer multer npm
  • High 7.5
    CVE-2025-31650 Public exploit EPSS 61%

    Apache Tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frame

    Improper Input Validation vulnerability in Apache Tomcat. Incorrect error handling for some invalid HTTP priority headers resulted in incomplete clean-up of the failed request which created a memory leak. A large number of such requests could trigger an OutOf…

    Apache Software Foundation Apache Tomcat tomcat9 tomcat10 Debian Ubuntu Maven