CWE-670.

Keycloak-services: keycloak-services: par single-use bypass via flow restart

• Red Hat Build of Keycloak
• Red Hat Single Sign-On 7
• CWE-670

Authlib: empty signatures validation in JWS JSON deserialization

• Weak cryptography or TLS
• CWE-20

<1.9.0 · fixed in 1.9.0

x86/AMD: ineffectual Zenbleed workaround

• Xen
• CWE-670

JIT miscompilation in the JavaScript Engine: JIT component

• Mozilla Firefox
• Mozilla Thunderbird
• CWE-670

AsyncHttpClient: WebSocket handshake continues after a failed Sec-WebSocket-Accept check

• AsyncHttpClient async-http-client
• CWE-345
• CWE-670

OpenBSD OpenSSH: In sshd in OpenSSH before 10.6, the restrict keyword (in authorized_keys) was supposed to…

• OpenBSD OpenSSH
• CWE-670

Vyper: Return inside for loop more than 1 level deep

• CWE-670
• CWE-691

>=0.1.0b10, <0.2.3 · fixed in 0.2.3

Missing authentication on a Kiteworks appliance setup function

• Kiteworks Core
• Authentication bypass
• CWE-670

Kiteworks Core Missing Authentication for Critical Function

• Kiteworks Core
• Authentication bypass
• CWE-670

MISP sachertortephp Xml::build() Operator Precedence Bypass Allows Unintended HTTPS SSRF When readFile Is Disabled

• misp sachertortephp
• Server-side request forgery (SSRF)
• CWE-670

Security Advisory 0175

• Arista Networks EOS
• CWE-670

MintyItanium Lost-Auction takes items like barrier blocks out from search GUI

• MintyItanium Lost-Auction
• CWE-670

Rocq Prover before 9.2.0 Guard Checker Accepts Fixpoint Passed as a Higher-Order Argument

• rocq
• CWE-670

Rocq Prover through 9.2.0 Guard Checker Trusts Corrupted Recursive Tree After Transport

• rocq
• CWE-670

Rocq Prover 8.20 before 9.2.0 Guard Checker Accepts Non-Terminating Fixpoint via Unchecked Cross-Calls

• rocq
• CWE-670

Perl versions from 5.9.4 before 5.41.9 produce incorrect regular expression match results when a stale failure flag ends the Aho-Corasick prescan early in S_find_byclass

• CWE-670

OpenBSD OpenSSH: In sshd in OpenSSH before 10.5, the restrict keyword (in authorized_keys) was supposed to…

• OpenBSD OpenSSH
• CWE-670

Intel(R) Xeon(R) processors may allow an escalation of…: Always-incorrect control flow implementation in some firmware for some Intel(R) Xeon(R)…

• Intel(R) Xeon(R) processors may allow an escalation of privilege. System software adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (high), integrity (high) and availability (none) impacts.
• CWE-670

JIT miscompilation in the JavaScript Engine: JIT component

• Mozilla Firefox
• Mozilla Thunderbird
• Memory corruption
• CWE-670

Gstreamer1-plugins-bad-free: gstreamer: webrtcbin accepts remote sdp without a=fingerprint due to inverted presence check

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• CWE-670

cut: -s (only-delimited) ignored when delimiter is a newline

• CWE-670

<0.7.0 · fixed in 0.7.0

Capgo - Integrity Issue in Release Routing via Multiple Public Channels

• Capgo
• CWE-670

Broken IPv6 Neighbor Discovery input validation allows spoofed RA/NS/NA acceptance in Zephyr net stack

• zephyr
• Authentication bypass
• CWE-670

Apache Tomcat has an Always-Incorrect Control Flow Implementation vulnerability

• CWE-670

>=11.0.0-M1, <11.0.23 || >=10.1.0-M1, <10.1.56 || >=9.0.0.M1, <9.0.119 || >=8.5.0, <=8.5.100 · fixed in 11.0.23, 10.1.56, 9.0.119

Apache Tomcat's rewrite valve has an Always-Incorrect Control Flow Implementation vulnerability

• CWE-670

>=11.0.0-M1, <11.0.23 || >=10.1.0-M1, <10.1.56 || >=9.0.0.M1, <9.0.119 || >=8.5.0, <=8.5.100 · fixed in 11.0.23, 10.1.56, 9.0.119

Cap-go - Broken Cursor Pagination in /private/devices Endpoint

• Cap-go capgo
• CWE-670

JIT miscompilation in the JavaScript: WebAssembly component

• Mozilla Firefox
• Mozilla Thunderbird
• CWE-670

Roundcube Webmail: Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7.1 has insecure code evaluation…

• Roundcube Webmail
• CWE-670

Cisco Nexus 3000 and 9000 Series Border Gateway Protocol Denial of Service Vulnerability

• Cisco NX-OS Software
• CWE-670

An issue in fohrloop dash-uploader v.0.1.0 through v.0.7.0a2 allows a remote attacker to execute arbitrary code via the dash_uploader/httprequesthandler.py, dash_uploader/upload.py in the Upload fu...

• Denial of service
• CWE-670

>=0.1.0, <0.7.0a1 · fixed in 0.7.0a1

In uriparser before 1.0.2, the function family EqualsUri can misclassify two unequal URIs as equal.

• uriparser
• CWE-670

ydb-go-sdk's transactions are not committed using the `options.WithCommit()` option on last call `table.Transaction.Execute` in transaction

• CWE-670

>=3.104.6, <3.134.2 · fixed in 3.134.2

Duplicate Advisory: uuid: Missing buffer bounds check in v3/v5/v6 when buf is provided

• CWE-670

<14.0.0 · fixed in 14.0.0

uuid: Missing buffer bounds check in v3/v5/v6 when buf is provided

• Memory corruption
• CWE-670

<11.1.1 || >=12.0.0, <12.0.1 || >=13.0.0, <13.0.1 · fixed in 11.1.1, 12.0.1, 13.0.1

Duplicate Advisory: uutils coreutils has an Issue With its Always-Incorrect Control Flow Implementation

• CWE-670

<0.7.0 · fixed in 0.7.0

KDE Kleopatra: KDE Kleopatra before 26.08.0 on Windows allows local users to obtain the privileges of a…

• KDE Kleopatra
• CWE-670

FastChat has a Content Moderation Bypass via Arena Side-by-Side Views

• CWE-670

<=0.2.36 · no fixed version yet

Luanti 5 before 5.15.2 sometimes allows unintended access to an insecure environment.

• Luanti
• CWE-670

Data Sharing Framework has an Inverted Time Comparison in OIDC JWKS and Token Cache

• CWE-670

* · no fixed version yet

MaraDNS: Deadwood in MaraDNS 3.5.0036 allows attackers to exhaust connection slots via a zone…

• MaraDNS
• CWE-670

varnish-software Varnish Cache: Varnish Cache 9 before 9.0.1 allows a "workspace overflow" denial of service (daemon…

• varnish-software Varnish Cache
• CWE-670

varnish-software Varnish Cache: Varnish Cache 9 before 9.0.1 and Varnish Enterprise before 6.0.16r11 allows a "workspace…

• varnish-software Varnish Cache
• CWE-670

An issue was discovered in musl libc 0.7.10 through 1.2.6.

• musl
• CWE-670

Host panic when Winch compiler executes `table.fill`

• CWE-670

>=0.0.0-0, <36.0.7 || >=37.0.0, <42.0.2 || >=43.0.0, <43.0.1 · fixed in 36.0.7, 42.0.2, 43.0.1

OpenClaw: Endpoint persists after trust decline, leaking gateway credentials

• CWE-372
• CWE-670

<2026.3.31 · fixed in 2026.3.31

OpenBSD OpenSSH: OpenSSH before 10.3 mishandles the authorized_keys principals option in uncommon…

• OpenBSD OpenSSH
• CWE-670

OpenSSH before 10.3 can use unintended ECDSA algorithms.

• OpenBSD OpenSSH
• CWE-670

Apache Traffic Server: A simple legitimate POST request causes a crash

• Apache Software Foundation Apache Traffic Server
• CWE-670

Nest Fastify HEAD Request Middleware Bypass

• CWE-670

<11.1.16 · fixed in 11.1.16

PX4 Autopilot MAVLink FTP Session Validation Logic Error Allows Operations on Invalid File Descriptors

• PX4-Autopilot
• CWE-670

Cosmos EVM: incorrect state handling during nested EVM execution paths

• CWE-670

<0.6.0 · fixed in 0.6.0

Denial-of-Service (DoS) vulnerability in Ethernet function of MELSEC iQ-F Series EtherNet/IP module and Ethernet module

• Mitsubishi Electric Corporation MELSEC iQ-F Series FX5-ENET/IP Ethernet Module FX5-ENET/IP
• Mitsubishi Electric Corporation MELSEC iQ-F Series FX5-EIP EtherNet/IP Module FX5-EIP
• CWE-670

The rs-soroban-sdk #[contractimpl] macro calls inherent function instead of trait function when names collide

• CWE-670

<22.0.10 || >=23.0.0, <23.5.2 || >=25.0.0, <25.1.1 · fixed in 22.0.10, 23.5.2, 25.1.1

NVIDIA DGX Spark: NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware…

• NVIDIA DGX Spark
• CWE-670

SSH Tectia Server: SSH Tectia Server before 6.6.6 sometimes allows attackers to read and alter a user's…

• SSH Tectia Server
• CWE-670

A logic issue was addressed with improved state management.

• Apple iOS and iPadOS
• Apple macOS
• CWE-670

KDE Konsole before 25.04.2 allows remote code execution in a certain scenario.

• KDE Konsole
• CWE-670

http-proxy-middleware can call writeBody twice because "else if" is not used

• CWE-670

>=1.3.0, <2.0.8 || >=3.0.0, <3.0.4 · fixed in 2.0.8, 3.0.4

tough terminating targets role delegations are not respected

• CWE-670

<0.20.0 · fixed in 0.20.0

An issue in onos v2.7.0 allows attackers to trigger unexpected behavior within a device connected to a legacy switch via changing the link type from indirect to direct.

• CWE-670