CWE-5524 advisories

CWE-552

What it is

Weakness class CWE-552 (MITRE Common Weakness Enumeration).

How to fix it

Upgrade the affected dependency to a patched version.

How to avoid it

Follow secure-coding guidance for this weakness class and keep dependencies current.

Known CWE-552 vulnerabilities

CVE-2026-63490 — high · Maven/com.github.jknack:handlebars-springmvc
GHSA-p63j-vcc4-9vmv — critical · npm/@vitest/browser
CVE-2026-54457 — high · PyPI/tensorzero
CVE-2026-54629 — high · Go/github.com/julien040/anyquery

Stateward flags CWE-552 in your own code and dependencies on every pull request.

Scan my repo

Summarize with AI

ChatGPT Claude Perplexity

Sources: CISA KEV (public domain), OSV.dev & GitHub Advisory Database (CC-BY-4.0), FIRST EPSS, NVD/CWE (public domain). Served live from the Stateward advisory database.