Common Weakness Enumeration
CWE-489 Active Debug Code
Description
The product is released with debugging code still enabled or active.
Associated Reviewed Advisories
Vulnerabilities classified under CWE-489 ordered by modification date.
| Advisory ID | NVD ID | Severity | PURLs | Summary | Last Modified |
|---|---|---|---|---|---|
| GHSA-3wgp-x9p5-c7cc | CVE-2026-58191 | MODERATE |
Appium: Reflected XSS / arbitrary JS in @appium/base-driver /test/guinea-pig* routes |
2026-09-01 | |
| GHSA-fq3w-p4fg-mw73 | - | LOW | - |
fixurjavainstall: Previous Fuji versions can accidentally wipe `/usr/share/man/man8` |
2026-06-25 |
| GHSA-jmfc-hfjq-pxcp | - | CRITICAL |
stigmem-node's federation insecure transport settings may allow non-loopback cleartext federation |
2026-05-29 | |
| GHSA-fwqx-8365-9983 | CVE-2026-45728 | HIGH |
Algernon: Single-file mode unconditionally enables debug mode |
2026-05-19 | |
| GHSA-m59h-42jf-cphr | CVE-2026-27131 | MODERATE | - |
Sprig Plugin for Craft CMS potentially discloses sensitive information via Sprig Playground |
2026-03-30 |
| GHSA-vg9h-jx4v-cwx2 | - | CRITICAL |
Unfurl's debug mode cannot be disabled due to string config parsing (Werkzeug debugger exposure) |
2026-01-29 | |
| GHSA-9j4f-f249-q5w8 | CVE-2022-46156 | MODERATE |
Default installation of `synthetic-monitoring-agent` exposes sensitive information |
2024-11-18 |