Common Weakness Enumeration
CWE-783 Operator Precedence Logic Error
Description
The product uses an expression in which operator precedence causes incorrect logic to be used.
Associated Reviewed Advisories
Vulnerabilities classified under CWE-783 ordered by modification date.
| Advisory ID | NVD ID | Severity | PURLs | Summary | Last Modified |
|---|---|---|---|---|---|
| GHSA-39q2-94rc-95cp | CVE-2026-65903 | MODERATE |
DOMPurify's ADD_TAGS function form bypasses FORBID_TAGS due to short-circuit evaluation |
2026-07-23 | |
| GHSA-w6fv-6gcc-x825 | CVE-2025-27512 | LOW | - |
Zincati allows unprivileged access to rpm-ostree D-Bus `Deploy()` and `FinalizeDeployment()` methods |
2025-03-19 |