Search the public rule index by CVE, GHSA, CWE, language, framework, author, or rule slug. Filter by language, framework, severity, confidence, license, and validation status.
The OHTTP chunked message parser does not track whether a final chunk was received before the outer HTTP body completes. An on-path adversary can forward a truncated chunked message that terminates at a non-final chunk boundary without producing a decryption error. Check if a final chunk was processed across the message stream, and throw an exception if the
When a dynamically generated atom (`String.to_atom/1`) is pinned in a pattern match inside a `case` statement, matching against structures with strings causes silent fall-through to the catch-all branch. In contexts like package resolution, this can silently bypass dependency signature and checksum evaluations, allowing tampered packages to be installed and
The middleware accesses `request_checksum_calculation` from global configuration without checking the command context, potentially bypassing required checksum validations.
A comparison using `zip` and `fold` was detected without a preceding length equivalence check. The `Iterator::zip` method stops when the shortest iterator is exhausted. If an attacker provides a partial input shorter than the expected input but matching its prefix, `zip` will successfully evaluate to true, causing an authentication or comparison bypass. Expl
