# CWE-697.

Every Advisory and CVE whose sources give the weakness CWE-697, newest first.

## Records, newest first (an older page)

- [Incorrect Comparison in NumPy](https://agentprime.io/advisories/GHSA-fpfv-jqm9-f5jm.md)
  `GHSA-fpfv-jqm9-f5jm`, `CVE-2021-34141`, `PYSEC-2021-855` · PyPI `numpy`: affected `<1.22`, fixed in `1.22` · CVSS 5.3 Medium · Not analysed yet · Published 18 Dec 2021 · Tags: CWE-697
- [github.com/tidwall/gjson Vulnerable to REDoS attack](https://agentprime.io/advisories/GHSA-c9gm-7rfj-8w5h.md)
  `GHSA-c9gm-7rfj-8w5h`, `CVE-2021-42248`, `CVE-2021-42836`, `GHSA-ppj4-34rq-v8j9`, `GO-2021-0265` · Go `github.com/tidwall/gjson`: affected `<1.9.3`, fixed in `1.9.3` · CVSS 7.5 High · Not analysed yet · Published 25 Oct 2021 · Tags: Denial of service, CWE-697
- [Integria IMS incorrect authorization](https://agentprime.io/advisories/CVE-2021-3833.md)
  `CVE-2021-3833` · CVE record: Ártica Integria IMS · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 7 Oct 2021 · Tags: CWE-697
- [Regular Expression Denial of Service in jsoneditor](https://agentprime.io/advisories/GHSA-hhfg-6hfc-rvxm.md)
  `GHSA-hhfg-6hfc-rvxm`, `CVE-2021-3822` · npm `jsoneditor`: affected `<9.5.6`, fixed in `9.5.6` · CVSS 5.3 Medium · Not analysed yet · Published 29 Sept 2021 · Tags: Denial of service, CWE-697
- [NLTK Vulnerable to REDoS](https://agentprime.io/advisories/GHSA-2ww3-fxvq-293j.md)
  `GHSA-2ww3-fxvq-293j`, `CVE-2021-3828`, `PYSEC-2021-356` · PyPI `nltk`: affected `<3.6.4`, fixed in `3.6.4` · CVSS 7.5 High · Not analysed yet · Published 29 Sept 2021 · Tags: Denial of service, CWE-697
- [Regular Expression Denial of Service in Leo Editor](https://agentprime.io/advisories/GHSA-x38q-xg2h-rxgx.md)
  `GHSA-x38q-xg2h-rxgx`, `CVE-2020-23478`, `PYSEC-2021-338` · PyPI `leo`: affected `<6.3`, fixed in `6.3` · CVSS 7.5 High · Not analysed yet · Published 23 Sept 2021 · Tags: Denial of service, CWE-697
- [Inefficient Regular Expression Complexity in vuelidate](https://agentprime.io/advisories/GHSA-vvf2-ppj9-pp49.md)
  `GHSA-vvf2-ppj9-pp49`, `CVE-2021-3794` · npm `@vuelidate/validators`: affected `<2.0.0-alpha.22`, fixed in `2.0.0-alpha.22` · CVSS 7.5 High · Not analysed yet · Published 20 Sept 2021 · Tags: Denial of service, CWE-697
- [Inefficient Regular Expression Complexity in chalk/ansi-regex](https://agentprime.io/advisories/GHSA-93q8-gq69-wqmw.md)
  `GHSA-93q8-gq69-wqmw`, `CVE-2021-3807` · npm `ansi-regex`: affected `>=3.0.0, <3.0.1 || >=4.0.0, <4.1.1 || >=5.0.0, <5.0.1 || >=6.0.0, <6.0.1`, fixed in `3.0.1`, `4.1.1`, `5.0.1`, `6.0.1` · CVSS 7.5 High · Not analysed yet · Published 20 Sept 2021 · Tags: Denial of service, CWE-697
- [Incorrect Comparison in sodiumoxide](https://agentprime.io/advisories/GHSA-wrvc-72w7-xpmj.md)
  `GHSA-wrvc-72w7-xpmj`, `CVE-2019-25002`, `RUSTSEC-2019-0026` · crates.io `sodiumoxide`: affected `>=0.2.0, <0.2.5`, fixed in `0.2.5` · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 25 Aug 2021 · Tags: CWE-697
- [Regular expression denial of service in react-native](https://agentprime.io/advisories/GHSA-7f53-fmmv-mfjv.md)
  `GHSA-7f53-fmmv-mfjv`, `CVE-2020-1920` · npm `react-native`: affected `>=0.59.0, <0.62.3 || >=0.63.0, <0.64.1`, fixed in `0.62.3`, `0.64.1` · CVSS 7.5 High · Not analysed yet · Published 20 Jul 2021 · Tags: Denial of service, CWE-697
- [Junos OS: QFX10K Series: Denial of Service (DoS) upon receipt of DVMRP packets received on multi-homing ESI in VXLAN.](https://agentprime.io/advisories/CVE-2021-0295.md)
  `CVE-2021-0295` · CVE record: Juniper Networks Junos OS · CVSS 6.1 Medium · Not analysed yet · Published 15 Jul 2021 · Tags: CWE-697
- [Incorrect Regular Expression in RestSharp](https://agentprime.io/advisories/GHSA-9pq7-rcxv-47vq.md)
  `GHSA-9pq7-rcxv-47vq`, `CVE-2021-27293` · NuGet `RestSharp`: affected `<106.11.8-alpha.0.13`, fixed in `106.11.8-alpha.0.13` · CVSS 7.5 High · Not analysed yet · Published 14 Jul 2021 · Tags: CWE-185, CWE-697
- [Logic error in authentication in proxy.py](https://agentprime.io/advisories/GHSA-cmc7-mfmr-xqrx.md)
  `GHSA-cmc7-mfmr-xqrx`, `CVE-2021-3116`, `PYSEC-2021-46` · PyPI `proxy-py`: affected `<2.3.1`, fixed in `2.3.1` · CVSS 7.5 High · Not analysed yet · Published 7 Apr 2021 · Tags: Authentication bypass, CWE-480, CWE-697
- [Incorrect comparison in kernel](https://agentprime.io/advisories/CVE-2021-20219.md)
  `CVE-2021-20219` · CVE record: kernel · No CVSS score · Not analysed yet · Published 23 Mar 2021 · Tags: CWE-697
- [False-positive validity for NFT1 genesis transactions](https://agentprime.io/advisories/GHSA-6jmr-jfh7-xg3h.md)
  `GHSA-6jmr-jfh7-xg3h`, `CVE-2020-15131` · npm `slp-validate`: affected `<1.2.2`, fixed in `1.2.2` · CVSS 7.5 High · Not analysed yet · Published 30 Jul 2020 · Tags: CWE-697
- [False-positive validity for NFT1 genesis transactions in SLPJS](https://agentprime.io/advisories/GHSA-cc2p-4jhr-xhhx.md)
  `GHSA-cc2p-4jhr-xhhx`, `CVE-2020-15130` · npm `slpjs`: affected `<0.27.4`, fixed in `0.27.4` · CVSS 7.5 High · Not analysed yet · Published 30 Jul 2020 · Tags: CWE-697
- [False-negative validation results in MINT transactions with invalid baton](https://agentprime.io/advisories/GHSA-4w97-57v2-3w44.md)
  `GHSA-4w97-57v2-3w44`, `CVE-2020-11072` · npm `slp-validate`: affected `<1.2.1`, fixed in `1.2.1` · CVSS 8.6 High · Not analysed yet · Published 12 May 2020 · Tags: CWE-697
- [False-negative validation results in MINT transactions with invalid baton](https://agentprime.io/advisories/GHSA-jc83-cpf9-q7c6.md)
  `GHSA-jc83-cpf9-q7c6`, `CVE-2020-11071` · npm `slpjs`: affected `<0.27.2`, fixed in `0.27.2` · CVSS 8.6 High · Not analysed yet · Published 12 May 2020 · Tags: CWE-697
- [ARC Platform Uses Signed Integer Comparison When Validating Syscall Numbers](https://agentprime.io/advisories/CVE-2020-10027.md)
  `CVE-2020-10027` · CVE record: zephyrproject-rtos zephyr · CVSS 7.8 High · Not analysed yet · Published 11 May 2020 · Tags: CWE-697
- [ARM Platform Uses Signed Integer Comparison When Validating Syscall Numbers](https://agentprime.io/advisories/CVE-2020-10024.md)
  `CVE-2020-10024` · CVE record: zephyrproject-rtos zephyr · CVSS 7.8 High · Not analysed yet · Published 11 May 2020 · Tags: CWE-697
- [Incorrect comparison in D-Link Multiple Routers](https://agentprime.io/advisories/CVE-2020-8864.md)
  `CVE-2020-8864` · CVE record: D-Link Multiple Routers · CVSS 8.8 High · Critical (CVSS 7+ and EPSS) · EPSS 0.82 · Not analysed yet · Published 23 Mar 2020 · Tags: CWE-697
- [Unraid 6.8.0 allows authentication bypass.](https://agentprime.io/advisories/CVE-2020-5849.md)
  `CVE-2020-5849` · CVE record · CVSS 7.5 High · Critical (KEV, CVSS 7+ and EPSS) · In CISA KEV · EPSS 0.93 · Not analysed yet · Published 16 Mar 2020 · Tags: CWE-697
- [Incorrect comparison in D-Link DAP-2610](https://agentprime.io/advisories/CVE-2020-8862.md)
  `CVE-2020-8862` · CVE record: D-Link DAP-2610 · CVSS 8.8 High · Critical (CVSS 7+ and EPSS) · EPSS 0.13 · Not analysed yet · Published 22 Feb 2020 · Tags: CWE-697
- [Timing attack on HMAC signature comparison in Apache Tapestry](https://agentprime.io/advisories/GHSA-fgmr-vx7c-5wj6.md)
  `GHSA-fgmr-vx7c-5wj6`, `CVE-2019-10071` · Maven `org.apache.tapestry:tapestry-core`: affected `>=5.4, <5.4.5`, fixed in `5.4.5` · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 26 Sept 2019 · Tags: Information disclosure, CWE-697
- [Insecure Comparison in secure-compare](https://agentprime.io/advisories/GHSA-h9x2-5rm7-x4gm.md)
  `GHSA-h9x2-5rm7-x4gm`, `CVE-2015-9238` · npm `secure-compare`: affected `<3.0.1`, fixed in `3.0.1` · No CVSS score · Not analysed yet · Published 3 Jun 2019 · Tags: CWE-697

Newest: <https://agentprime.io/advisories/tag/cwe-697.md>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-697&cursor=WyIyMDIyLTAxLTA3VDAwOjAxOjExLjAwMDAwMFoiLCJHSFNBLThyaDYtaDk0bS12ajU0Il0>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-697/?cursor=WyIyMDIyLTAxLTA3VDAwOjAxOjExLjAwMDAwMFoiLCJHSFNBLThyaDYtaDk0bS12ajU0Il0>. Everything for agents: <https://agentprime.io/llms.txt>.