Common Weakness Enumeration

CWE-440 Expected Behavior Violation

Description

A feature, API, or function does not perform according to its specification.

Associated Reviewed Advisories

Vulnerabilities classified under CWE-440 ordered by modification date.

16 reviewed records

Advisory ID	NVD ID	Severity	PURLs	Summary	Last Modified
GHSA-8988-9cw3-xx77	CVE-2026-97687	HIGH	pypi/urllib3	urllib3: HTTPS proxy TLS configuration may be ignored or overridden	2026-09-30
GHSA-fqf6-gxhh-2xhw	-	HIGH	-	uutils coreutils: cp/install/mv/ln --suffix alone does not enable backup mode (silent data loss vs GNU)	2026-07-07
GHSA-rxmx-g7hr-8mx4	CVE-2026-41354	MODERATE	npm/openclaw	OpenClaw: Zalo replay dedupe keys could suppress messages across chats or senders	2026-05-07
GHSA-r99v-75p9-xqm5	CVE-2026-41136	MODERATE	golang/github.com/free5gc/amf	free5GC AMF: Missing default case in Content-Type switch in HTTPUEContextTransfer	2026-04-27
GHSA-3j8v-cgw4-2g6q	CVE-2026-35040	MODERATE	npm/fast-jwt	fast-jwt: Stateful RegExp (/g or /y) causes non-deterministic allowed-claim validation (logical DoS)	2026-04-09
GHSA-mrr8-v49w-3333	-	LOW	npm/sweetalert2	sweetalert2 contains potentially undesirable behavior	2025-08-14
GHSA-9hxf-ppjv-w6rq	CVE-2023-32732	MODERATE	gem/grpc maven/io.grpc/grpc-protobuf pypi/grpcio	gRPC connection termination issue	2025-08-13
GHSA-cfgp-2977-2fmm	CVE-2023-32731	HIGH	gem/grpc maven/io.grpc/grpc-protobuf pypi/grpcio	Connection confusion in gRPC	2025-08-13
GHSA-7g9j-g5jg-3vv3	CVE-2024-58265	LOW	-	Unauthenticated Nonce Increment in snow	2025-07-28
GHSA-5hq9-5r78-2gjh	CVE-2025-6211	MODERATE	pypi/llama-index pypi/llama-index-readers-docugami	LlamaIndex vulnerable to data loss through hash collisions in its DocugamiReader class	2025-07-10
GHSA-p7j4-jwjf-5x9w	CVE-2025-3044	MODERATE	pypi/llama-index-readers-papers	LlamaIndex vulnerability in ArxivReader class can cause MD5 hash collisions	2025-07-08
GHSA-32g6-mg92-ghm2	CVE-2025-0508	MODERATE	pypi/sagemaker	SageMaker Workflow component allows possibility of MD5 hash collisions	2025-03-21
GHSA-qc4v-xq2m-65wc	CVE-2024-47762	MODERATE	npm/@backstage/plugin-app-backend	Unexpected visibility of environment variable configurations in @backstage/plugin-app-backend	2024-10-03
GHSA-8mrm-r7h3-c3hj	CVE-2024-6281	HIGH	pypi/lollms	LoLLMS vulnerable to Expected Behavior Violation	2024-09-13
GHSA-q9p4-hw9m-fj2v	CVE-2024-32971	CRITICAL	-	Apollo Router vulnerable to Critical Regression In Query Plan Cache	2024-05-02
GHSA-9hg2-395j-83rm	CVE-2017-5651	CRITICAL	maven/org.apache.tomcat.embed/tomcat-embed-core maven/org.apache.tomcat/tomcat-coyote	Expected Behavior Violation in Apache Tomcat	2024-04-18