CWE-1023 Incomplete Comparison with Missing Factors
Description
The product performs a comparison between entities that must consider multiple factors or characteristics of each entity, but the comparison does not include one or more of these factors.
Associated Reviewed Advisories
Vulnerabilities classified under CWE-1023 ordered by modification date.
| Advisory ID | NVD ID | Severity | PURLs | Summary | Last Modified |
|---|---|---|---|---|---|
| GHSA-r5pm-vrc5-3m73 | CVE-2026-54713 | LOW | - |
cakephp/queue's Incomplete Comparison in getUniqueId vulnerable to collisions |
2026-08-27 |
| GHSA-mmg4-322v-6jvc | CVE-2026-54181 | MODERATE | - |
Laravel Backpack CRUD: Stored XSS in the color column — the `@if($column['escaped'])` branches are inverted |
2026-08-20 |
| GHSA-923m-gv2p-w5qp | CVE-2026-48587 | LOW |
Django: has_vary_header may expose cached responses when Vary values contain whitespace |
2026-08-07 | |
| GHSA-5jx8-q4cp-rhh6 | CVE-2026-4599 | CRITICAL |
jsrsasign: Incomplete Comparison Allows DSA Private Key Recovery via Biased Nonce Generation |
2026-07-21 | |
| GHSA-77q5-rr5v-x43q | - | HIGH |
OpenClaw: Trusted retry endpoint checks could match hostname prefixes |
2026-07-02 | |
| GHSA-x5qj-865h-mgvm | CVE-2026-48761 | MODERATE | - |
Symfony: HtmlSanitizer UrlAttributeSanitizer Misses URL Attributes |
2026-06-15 |
| GHSA-c65p-x677-fgj6 | CVE-2025-46722 | MODERATE |
vLLM has a Weakness in MultiModalHasher Image Hashing Implementation |
2025-05-29 |