CWE-460 Improper Cleanup on Thrown Exception
Description
The product does not clean up its state or incorrectly cleans up its state when an exception is thrown, leading to unexpected state or control flow.
Associated Reviewed Advisories
Vulnerabilities classified under CWE-460 ordered by modification date.
| Advisory ID | NVD ID | Severity | PURLs | Summary | Last Modified |
|---|---|---|---|---|---|
| GHSA-fhv5-28vv-h8m8 | CVE-2026-48524 | LOW |
PyJWKClient unbounded JWKS endpoint requests via attacker-controlled kid values (DoS) |
2026-07-31 | |
| GHSA-rjcw-vg7j-m9rc | CVE-2026-33481 | MODERATE |
Syft improper temporary file cleanup |
2026-03-27 | |
| GHSA-xx83-cxmq-x89m | CVE-2024-12289 | MODERATE |
Boundary Community Edition Incorrectly Handles HTTP Requests On Initialization Which May Lead to a Denial of Service |
2025-12-31 | |
| GHSA-3p2h-wqq4-wf4h | CVE-2025-31650 | MODERATE |
Apache Tomcat Denial of Service via invalid HTTP priority header |
2025-11-03 | |
| GHSA-472w-7w45-g3w5 | CVE-2025-32439 | MODERATE | - |
Pleezer resource exhaustion through uncollected hook script processes |
2025-07-21 |
| GHSA-pj3v-9cm8-gvj8 | CVE-2025-43855 | HIGH |
tRPC 11 WebSocket DoS Vulnerability |
2025-04-24 | |
| GHSA-cf3q-gqg7-3fm9 | CVE-2025-30157 | MODERATE |
Envoy crashes when HTTP ext_proc processes local replies |
2025-03-21 | |
| GHSA-qq29-5vjh-vxwr | CVE-2022-3301 | MODERATE |
rdiffweb vulnerable to Improper Cleanup on Thrown Exception |
2024-10-25 | |
| GHSA-566x-hhrf-qf8m | CVE-2020-35923 | MODERATE | - |
ordered_float:NotNan may contain NaN after panic in assignment operators |
2023-06-13 |