Common Weakness Enumeration
CWE-179 Incorrect Behavior Order: Early Validation
Description
The product validates input before applying protection mechanisms that modify the input, which could allow an attacker to bypass the validation via dangerous inputs that only arise after the modification.
Associated Reviewed Advisories
Vulnerabilities classified under CWE-179 ordered by modification date.
| Advisory ID | NVD ID | Severity | PURLs | Summary | Last Modified |
|---|---|---|---|---|---|
| GHSA-h39g-6x3c-7fq9 | - | LOW |
Zio has SubFileSystem Path Confinement Bypass via Unresolved `..` Segment |
2026-04-18 | |
| GHSA-7cfr-5cjf-32p4 | CVE-2025-4759 | MODERATE |
lockfile-lint-api Vulnerable to Incorrect Behavior Order |
2025-05-16 |