Common Weakness Enumeration

CWE-495 Private Data Structure Returned From A Public Method

Description

The product has a method that is declared public, but returns a reference to a private data structure, which could then be modified in unexpected ways.

Associated Reviewed Advisories

Vulnerabilities classified under CWE-495 ordered by modification date.

2 reviewed records
Advisory ID NVD ID Severity PURLs Summary Last Modified
GHSA-gcjh-h69q-9w9g - MODERATE

cel-go: JSON Private Fields Exposed via NativeTypes and ParseStructTag

2026-07-24
GHSA-wqcc-mfhw-53pc CVE-2025-29868 LOW

Apache Answer User Using External Images Potentially Discloses User Information

2025-04-10