CWE-372.

Yielding in a component start function can lead to a host panic

• CWE-372

>=46.0.0, <48.0.6 || >=49.0.0, <49.0.3 · fixed in 48.0.6, 49.0.3

Frappe before 14.59.0 Safe Execution Flag Bypass in Server Scripts

• frappe
• CWE-372

wolfSSH server accepts server-to-client DH group exchange messages from an unauthenticated client, causing pre-authentication primality-test CPU exhaustion and key exchange role confusion

• wolfSSL Inc. wolfSSH
• Denial of service
• CWE-372

OpenClaw: Endpoint persists after trust decline, leaking gateway credentials

• CWE-372
• CWE-670

<2026.3.31 · fixed in 2026.3.31

OpenClaw: Telegram legacy allowFrom migration fans default-account trust into all named accounts

• Broken access control
• CWE-372

<2026.3.31 · fixed in 2026.3.31

OpenClaw: Tlon Startup Migration Rehydrates Empty-Array Revocations From File Config

• CWE-372
• CWE-436

<2026.3.31 · fixed in 2026.3.31

The TLS engine in Kwik commit 745fd4e2 does not track the current state of the connection.

• CWE-372

Incomplete Internal State Distinction in ntpsec

• ntpsec
• CWE-372

Junos OS: SRX 4600 and SRX 5000 Series: The receipt of specific genuine packets by SRXes configured for L2 transparency will cause a DoS

• Juniper Networks Junos OS
• CWE-372

DMTF-2023-0001: SPDM mutual authentication bypass

• DMTF libspdm
• Authentication bypass
• CWE-372

Access Restriction Bypass in kube-apiserver

• Broken access control
• CWE-372

<1.18.18 || >=1.19.0, <1.19.10 || >=1.20.0, <1.20.6 · fixed in 1.18.18, 1.19.10, 1.20.6

The Eclipse Foundation Eclipse Californium: In Eclipse Californium version 2.3.0 to 2.6.0…

• The Eclipse Foundation Eclipse Californium
• CWE-372