Skip to content
OpenAdvisories

Weakness (CWE)

CWE-913: Improper Control of Dynamically-Managed Code Resources

Class Incomplete

The product does not properly restrict reading from or writing to dynamically-managed code resources such as variables, objects, classes, attributes, functions, or executable instructions or statements.

How to prevent it (2 mitigations)

  1. Implementation

    For any externally-influenced input, check the input against an allowlist of acceptable values.

  2. Implementation, Architecture and Design

    Refactor the code so that it does not need to be dynamically managed.

Source: MITRE CWE-913

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 10.0
    CVE-2025-68613 Exploited Public exploit EPSS 99%

    n8n Vulnerable to Remote Code Execution via Expression Injection

    n8n is an open source workflow automation platform. Versions starting with 0.211.0 and prior to 1.120.4, 1.121.1, and 1.122.0 contain a critical Remote Code Execution (RCE) vulnerability in their workflow expression evaluation system. Under certain conditions…

    n8n-io n8n n8n npm
    KEV Mar 11, 2026