CWE-13576 advisories

CWE-1357

What it is

Weakness class CWE-1357 (MITRE Common Weakness Enumeration).

How to fix it

Upgrade the affected dependency to a patched version.

How to avoid it

Follow secure-coding guidance for this weakness class and keep dependencies current.

Known CWE-1357 vulnerabilities

NPM-QIX-CHALK-DEBUG-2025 — critical · npm/chalk, debug, ansi-styles, strip-ansi, color-convert (+13 more) · exploited
WEB3-DMM-BITCOIN-2024 — critical · Web3 · CEX/DMM Bitcoin
WEB3-LEDGER-CONNECT-KIT-2023 — critical · Web3 · Ethereum/Ledger Connect Kit · exploited
SC-MOVEIT-CLOP-2023 — critical · Managed file transfer/Progress MOVEit Transfer
SC-KASEYA-VSA-2021 — critical · Software vendor · MSP/Kaseya VSA
SC-CCLEANER-2017 — high · Software vendor/CCleaner (Piriform / Avast)

Stateward flags CWE-1357 in your own code and dependencies on every pull request.

Scan my repo

Summarize with AI

ChatGPT Claude Perplexity

Sources: CISA KEV (public domain), OSV.dev & GitHub Advisory Database (CC-BY-4.0), FIRST EPSS, NVD/CWE (public domain). Served live from the Stateward advisory database.