CWE-351 Insufficient Type Distinction
Description
The product does not properly distinguish between different types of elements in a way that leads to insecure behavior.
Associated Reviewed Advisories
Vulnerabilities classified under CWE-351 ordered by modification date.
| Advisory ID | NVD ID | Severity | PURLs | Summary | Last Modified |
|---|---|---|---|---|---|
| GHSA-mfqj-cqv3-h7xw | CVE-2026-15305 | MODERATE | - |
TYPO3 CMS - Unrestricted File Upload in Form Framework |
2026-08-31 |
| GHSA-p8pr-442q-qf8g | - | MODERATE | - |
Duplicate Advisory: TYPO3-CORE-SA-2026-020: TYPO3 CMS - Unrestricted File Upload in Form Framework |
2026-08-31 |
| GHSA-6336-qqw9-v6x6 | CVE-2026-41341 | LOW |
OpenClaw: Discord Component Interaction Misclassifies Group DM as Direct Message |
2026-05-06 | |
| GHSA-pr66-whqj-rq5p | - | LOW |
Duplicate Advisory: OpenClaw: Discord Component Interaction Misclassifies Group DM as Direct Message |
2026-05-04 | |
| GHSA-98vj-mm79-v77r | CVE-2025-65960 | MODERATE | - |
Contao is vulnerable to remote code execution in template closures |
2025-11-27 |
| GHSA-4v6w-xpmh-gfgp | CVE-2025-54413 | HIGH |
Skops may allow MethodNode to access unexpected object fields through dot notation, leading to arbitrary code execution at load time |
2025-09-05 | |
| GHSA-m7f4-hrc6-fwg3 | CVE-2025-54412 | HIGH |
Skops has Inconsistent Trusted Type Validation that Enables Hidden `operator` Methods Execution |
2025-07-29 | |
| GHSA-9hq9-cr36-4wpj | CVE-2025-47939 | MODERATE | - |
TYPO3 Allows Unrestricted File Upload in File Abstraction Layer |
2025-05-20 |
| GHSA-5xh2-23cc-5jc6 | CVE-2025-22151 | LOW |
Strawberry GraphQL has type resolution vulnerability in node interface that allows potential data leakage through incorrect type resolution |
2025-01-09 | |
| GHSA-g4w7-3qr8-5623 | CVE-2020-35872 | CRITICAL | - |
Improper type usage in rusqlite |
2021-08-19 |