Weakness (CWE)

CWE-675: Multiple Operations on Resource in Single-Operation Context

Class Draft

The product performs the same operation on a resource two or more times, when the operation should only be applied once.

Source: MITRE CWE-675

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

Critical 9.1

CVE-2026-78663

Double flow control refund on HTTP/2 server streams in net/http

The HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream (refunding data for any sent-but-unread portion of the stream), and again when a request handler reads the buffered data. A malicious client…

Go standard library golang.org/x/net net/http golang.org/x/net/http2 Debian Ubuntu Azure Linux Alpine Wolfi Go

Oct 8, 2026
Critical 9.4

CVE-2019-17638 Public exploit EPSS 11%

Operation on a Resource after Expiration or Release in Jetty Server

In Eclipse Jetty, versions 9.4.27.v20200227 to 9.4.29.v20200521, in case of too large response headers, Jetty throws an exception to produce an HTTP 431 error. When this happens, the ByteBuffer containing the HTTP response headers is released back to the Byte…

The Eclipse Foundation Eclipse Jetty jetty9 org.eclipse.jetty:jetty-server Debian Maven

Jul 9, 2020