Advisories · Weakness
CWE-573.
Every Advisory and CVE whose sources give the weakness CWE-573, newest first.
- CVSS 7.3 High
The cstruct package before 6.3.0 for OCaml mishandles indexes.
- OCaml cstruct
- CWE-573
- CVSS 4.8 Medium
OpenBSD OpenSSH: sshd in OpenSSH before 10.4 has an undocumented security-relevant behavior…
- OpenBSD OpenSSH
- CWE-573
- CVSS 8.3 High
Zebra v4.4.0 still accepts V5 SIGHASH_SINGLE without a corresponding output
- Weak cryptography or TLS
- CWE-354
<4.4.1 · fixed in 4.4.1
GHSA-pvmv-cwg8-v6c8 · CVE-2026-104435 - CVSS 8.3 High
Zebra's Transparent SIGHASH_SINGLE Handling Diverges from zcashd for Corresponding Outputs
- Weak cryptography or TLS
- CWE-354
<4.4.0 · fixed in 4.4.0
GHSA-cwfq-rfcr-8hmp · CVE-2026-104437 - CVSS 9.3 CriticalCritical · CVSS 9+
Zebra Vulnerable to Consensus Divergence in Transparent Sighash Hash-Type Handling
- CWE-573
<4.3.1 · fixed in 4.3.1
GHSA-8m29-fpq5-89jj · CVE-2026-41583 - CVSS 8.2 High
Authlib: Fail-Open Cryptographic Verification in OIDC Hash Binding
- CWE-325
- CWE-354
<1.6.9 · fixed in 1.6.9
GHSA-m344-f55w-2m6j · CVE-2026-28498 - CVSS 5.4 Medium
BSV Blockchain SDK has an Authentication Signature Data Preparation Vulnerability
- CWE-573
<2.0.0 · fixed in 2.0.0
GHSA-vjpq-xx5g-qvmm · CVE-2025-69287 - CVSS 6.0 Medium
axios-cache-interceptor Vulnerable to Cache Poisoning via Ignored HTTP Vary Header
- Broken access control
- CWE-524
<1.11.1 · fixed in 1.11.1
GHSA-x4m5-4cw8-vc44 · CVE-2025-69202 - CVSS 3.3 Low
Snowflake Connector for C/C++ retries malformed requests
- snowflakedb libsnowflakeclient
- CWE-573
- CVSS 8.7 High
Junos OS: SRX and EX Series, MX240, MX480, MX960, QFX5120 Series: When web management is enabled for specific services an attacker may cause a CPU spike by sending genuine packets to the device
- Juniper Networks Junos OS
- CWE-573
-
Moodle: A vulnerability was found in Moodle affection 3.7 to 3.7.1, 3.6 to 3.6.5…
- Moodle
- CWE-573