-
Notifications
You must be signed in to change notification settings - Fork 23
All issues
Issue creation is restricted in this repository
Issues
is:issue state:open
is:issue state:open
Search results
ES2608-94e48d11 - Credential Destination Injection
Phase02-Ack-ReceiptThe CWE team has acknowledged receipt of the submission by notifying the submitterThe CWE team has acknowledged receipt of the submission by notifying the submitterStatus: Open.#217 In CWE-CAPEC/CWE-Content-Development-Repository;ES2608-c6cae038 - Various Improvements to CWE-88
Phase02-Ack-ReceiptThe CWE team has acknowledged receipt of the submission by notifying the submitterThe CWE team has acknowledged receipt of the submission by notifying the submitterStatus: Open.#216 In CWE-CAPEC/CWE-Content-Development-Repository;ES2608-28b3382f - Modify CWE-69 to Include Info about Alternate Data Stream Filename Gate Bypass
Phase02-Ack-ReceiptThe CWE team has acknowledged receipt of the submission by notifying the submitterThe CWE team has acknowledged receipt of the submission by notifying the submitterStatus: Open.#215 In CWE-CAPEC/CWE-Content-Development-Repository;ES2608-19c574c5 - Prompt injection in open source software which is triggered only when interpreted by an AI
Phase02-Ack-ReceiptThe CWE team has acknowledged receipt of the submission by notifying the submitterThe CWE team has acknowledged receipt of the submission by notifying the submitterStatus: Open.#214 In CWE-CAPEC/CWE-Content-Development-Repository;ES2608-a21c00a6 - Missing Revalidation of Attested State Before Security-Sensitive Use
Phase02-Ack-ReceiptThe CWE team has acknowledged receipt of the submission by notifying the submitterThe CWE team has acknowledged receipt of the submission by notifying the submitterStatus: Open.#213 In CWE-CAPEC/CWE-Content-Development-Repository;ES2608-993fe625 - Reliance on Embedding Similarity for Security-Sensitive Resource Selection
Phase02-Ack-ReceiptThe CWE team has acknowledged receipt of the submission by notifying the submitterThe CWE team has acknowledged receipt of the submission by notifying the submitterStatus: Open.#212 In CWE-CAPEC/CWE-Content-Development-Repository;ES2608-5df528b1 - Modify CWE-348 to Improve Discoverability
Phase02-Ack-ReceiptThe CWE team has acknowledged receipt of the submission by notifying the submitterThe CWE team has acknowledged receipt of the submission by notifying the submitterStatus: Open.#211 In CWE-CAPEC/CWE-Content-Development-Repository;ES2608-8a08a8f6 - Reliance on Preservation of Authentication Material Placed Outside the Protocol's Declared Message Boundary
Phase02-Ack-ReceiptThe CWE team has acknowledged receipt of the submission by notifying the submitterThe CWE team has acknowledged receipt of the submission by notifying the submitterStatus: Open.#210 In CWE-CAPEC/CWE-Content-Development-Repository;ES2607-f7b34142 - Improper Enforcement of Safety Policy Across Intent-Equivalent Inputs in LLM-Based Software
Phase02-Ack-ReceiptThe CWE team has acknowledged receipt of the submission by notifying the submitterThe CWE team has acknowledged receipt of the submission by notifying the submitterStatus: Open.#209 In CWE-CAPEC/CWE-Content-Development-Repository;ES2607-4e79f13a - Improper Validation of Identifier Uniqueness After Lossy Normalization
Phase02-Ack-ReceiptThe CWE team has acknowledged receipt of the submission by notifying the submitterThe CWE team has acknowledged receipt of the submission by notifying the submitterrelated-to-aiSubmission related to AI or ML systems, including but not limited to LLMsSubmission related to AI or ML systems, including but not limited to LLMsStatus: Open.#208 In CWE-CAPEC/CWE-Content-Development-Repository;ES2607-10364d0c - Reliance on a Non-Deterministic Evaluator for a Security Decision
Phase02-Ack-ReceiptThe CWE team has acknowledged receipt of the submission by notifying the submitterThe CWE team has acknowledged receipt of the submission by notifying the submitterrelated-to-aiSubmission related to AI or ML systems, including but not limited to LLMsSubmission related to AI or ML systems, including but not limited to LLMsStatus: Open.#207 In CWE-CAPEC/CWE-Content-Development-Repository;ES2606-11f89c19 - Emergent Trust Boundary Violation (ETBV)
Phase04-Init-ConsultThe external submission requires consultation between the original submitter and the CWE teamThe external submission requires consultation between the original submitter and the CWE teamrelated-to-hwSubmission related to hardwareSubmission related to hardwareSUB.ATTACKSubmission Content Problem: Too attack-focusedSubmission Content Problem: Too attack-focusedSUB.RELREFSSubmission Content Problem: No relevant referencesSubmission Content Problem: No relevant referencesStatus: Open.#206 In CWE-CAPEC/CWE-Content-Development-Repository;