Common Weakness Enumeration
CWE-396 Declaration of Catch for Generic Exception
Description
Catching overly broad exceptions promotes complex error handling code that is more likely to contain security vulnerabilities.
Associated Reviewed Advisories
Vulnerabilities classified under CWE-396 ordered by modification date.
| Advisory ID | NVD ID | Severity | PURLs | Summary | Last Modified |
|---|---|---|---|---|---|
| GHSA-4wr3-f4p3-5wjh | CVE-2026-40149 | HIGH |
PraisonAI: Unauthenticated Allow-List Manipulation Bypasses Agent Tool Approval Safety Controls |
2026-04-10 | |
| GHSA-q5fh-2hc8-f6rq | CVE-2026-27482 | MODERATE |
Ray dashboard DELETE endpoints allow unauthenticated browser-triggered DoS (Serve shutdown / job deletion) |
2026-02-23 |