Common Weakness Enumeration
CWE-228 Improper Handling of Syntactically Invalid Structure
Description
The product does not handle or incorrectly handles input that is not syntactically well-formed with respect to the associated specification.
Associated Reviewed Advisories
Vulnerabilities classified under CWE-228 ordered by modification date.
| Advisory ID | NVD ID | Severity | PURLs | Summary | Last Modified |
|---|---|---|---|---|---|
| GHSA-26wq-p25c-j6fv | CVE-2026-107299 | MODERATE |
msgpack5: Reserved byte can cause unbounded stream buffering |
2026-10-08 | |
| GHSA-jxw3-mjmx-3pqm | CVE-2026-9205 | CRITICAL |
Langflow: Weak Fernet Key via random.seed() |
2026-10-05 | |
| GHSA-hrhf-2vcr-ghch | - | HIGH |
CometBFT's invalid BitArray handling can lead to network halt |
2025-11-18 | |
| GHSA-32jf-h775-g29h | CVE-2024-6382 | MODERATE | - |
MongoDB Rust driver may issue unintended commands |
2025-10-02 |
| GHSA-8m95-fffc-h4c5 | CVE-2025-47736 | LOW | - |
libsql-sqlite3-parser crash due to invalid UTF-8 input |
2025-05-09 |
| GHSA-w8xv-rwgf-4fwh | CVE-2025-0343 | LOW | - |
CVE-2025-0343: Swift ASN.1 can crash when parsing maliciously formed BER/DER |
2025-01-15 |
| GHSA-6jmw-6mxw-w4jc | CVE-2023-39914 | HIGH | - |
BER/CER/DER decoder panics on invalid input |
2024-09-11 |
| GHSA-2x32-jm95-2cpx | CVE-2020-27847 | CRITICAL |
Authentication Bypass in dex |
2021-06-01 |