CWE-912 Hidden Functionality
Description
The product contains functionality that is not documented, not part of the specification, and not accessible through an interface or command sequence that is obvious to the product's users or administrators.
Associated Reviewed Advisories
Vulnerabilities classified under CWE-912 ordered by modification date.
| Advisory ID | NVD ID | Severity | PURLs | Summary | Last Modified |
|---|---|---|---|---|---|
| GHSA-9wfr-w7mm-pc7f | CVE-2026-34769 | HIGH |
Electron: Renderer command-line switch injection via undocumented commandLineSwitches webPreference |
2026-04-06 | |
| GHSA-pjwm-rvh2-c87w | CVE-2021-4229 | HIGH |
Embedded malware in ua-parser-js |
2026-02-17 | |
| GHSA-236c-vhj4-gfxg | - | HIGH |
Duplicate Advisory: Embedded malware in ua-parser-js |
2026-02-17 | |
| GHSA-8jh9-wqpf-q52c | - | LOW |
sweetalert2 v8.19.1 and above contains hidden functionality |
2025-09-24 | |
| GHSA-pg98-6v7f-2xfv | - | LOW |
sweetalert2 v9.17.4 and above contains hidden functionality |
2025-09-24 | |
| GHSA-qq6h-5g6j-q3cm | - | LOW |
sweetalert2 v11.4.9 and above contains hidden functionality |
2025-08-25 | |
| GHSA-457r-cqc8-9vj9 | - | LOW |
sweetalert2 v10.16.10 and above contains hidden functionality |
2025-08-25 | |
| GHSA-j9cw-5cpj-9qj5 | CVE-2021-36403 | MODERATE | - |
Moodle has a Hidden Functionality vulnerability |
2023-03-13 |
| GHSA-4g82-3jcr-q52w | - | CRITICAL |
Malware in ctx |
2022-05-25 | |
| GHSA-8gr3-2gjw-jj7g | - | LOW |
Hidden functionality in node-ipc |
2022-03-16 |