Common Weakness Enumeration
CWE-657 Violation of Secure Design Principles
Description
The product violates well-established principles for secure design.
Associated Reviewed Advisories
Vulnerabilities classified under CWE-657 ordered by modification date.
| Advisory ID | NVD ID | Severity | PURLs | Summary | Last Modified |
|---|---|---|---|---|---|
| GHSA-qf73-2hrx-xprp | CVE-2026-39888 | CRITICAL |
PraisonAI has sandbox escape via exception frame traversal in `execute_code` (subprocess mode) |
2026-04-09 | |
| GHSA-7gh6-f4jh-3crq | CVE-2021-28583 | HIGH | - |
Magento Violation of Secure Design Principles vulnerability in RMA PDF filename formats |
2025-02-10 |
| GHSA-qm5v-pj64-852j | - | MODERATE | - |
Passbolt Api Tabnabbing when opening URI with menu "Open URI in a new tab" |
2024-05-20 |
| GHSA-mp6r-fgw2-rxfx | CVE-2021-26956 | CRITICAL | - |
Arbitrary return types in xcb |
2023-06-13 |
| GHSA-jrf8-cmgg-gv2m | CVE-2021-26307 | MODERATE | - |
Error on unsupported architectures in raw-cpuid |
2023-06-13 |
| GHSA-f3mq-99jr-ww4r | CVE-2020-36467 | MODERATE | - |
Multiple soundness issues in cgc |
2023-06-13 |
| GHSA-pwhf-7427-9vv2 | CVE-2020-36468 | MODERATE | - |
Non-atomic writes in cgc |
2023-06-13 |
| GHSA-8xw8-mmqv-frqq | - | HIGH | - |
fake-static allows converting any reference into a `'static` reference |
2021-08-18 |