Skip to content
OpenAdvisories

Weakness (CWE)

CWE-573: Improper Following of Specification by Caller

Class Draft

The product does not follow or incorrectly follows the specifications as required by the implementation language, environment, framework, protocol, or platform.

How to prevent it (1 mitigation)

  1. Implementation

    When leveraging external functionality, such as an API, it is important that the caller does so in accordance with the requirements of the external functionality.

Source: MITRE CWE-573

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 4.8
    CVE-2026-59998

    sshd in OpenSSH before 10.4 has an undocumented security-relevant behavior: GSSAPIStrictAcceptorCheck has no value if t…

    OpenBSD OpenSSH openssh openssh Debian Ubuntu Alpine
  • Medium 5.4
    CVE-2025-69287

    BSV Blockchain SDK has an Authentication Signature Data Preparation Vulnerability

    The BSV Blockchain SDK is a unified TypeScript SDK for developing scalable apps on the BSV Blockchain. Prior to version 2.0.0, a cryptographic vulnerability in the TypeScript SDK's BRC-104 authentication implementation caused incorrect signature data preparat…

    bsv-blockchain ts-sdk @bsv/sdk npm
  • Medium 6.0
    CVE-2025-69202

    axios-cache-interceptor Vulnerable to Cache Poisoning via Ignored HTTP Vary Header

    Axios Cache Interceptor is a cache interceptor for axios. Prior to version 1.11.1, when a server calls an upstream service using different auth tokens, axios-cache-interceptor returns incorrect cached responses, leading to authorization bypass. The cache key …

    arthurfiorette axios-cache-interceptor axios-cache-interceptor npm