Skip to content
OpenAdvisories

Weakness (CWE)

CWE-657: Violation of Secure Design Principles

Class Draft Mapping discouraged

The product violates well-established principles for secure design.

Source: MITRE CWE-657

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 10.0
    CVE-2026-39888

    PraisonAIAgents has a sandbox escape via exception frame traversal in `execute_code` (subprocess mode)

    PraisonAI is a multi-agent teams system. Prior to 1.5.115, execute_code() in praisonaiagents.tools.python_tools defaults to sandbox_mode="sandbox", which runs user code in a subprocess wrapped with a restricted __builtins__ dict and an AST-based blocklist. Th…

    MervinPraison praisonaiagents praisonaiagents PyPI
  • Critical 9.8
    CVE-2021-26955

    Out of bounds read in xcb

    An issue was discovered in the xcb crate through 2021-02-04 for Rust. It has a soundness violation because xcb::xproto::GetAtomNameReply::name() calls std::str::from_utf8_unchecked() on unvalidated bytes from an X server.

    rust-xcb rust-xcb xcb Debian Ubuntu crates.io