Explore

Rule Explorer

Search the public rule index by CVE, GHSA, CWE, language, framework, author, or rule slug. Filter by language, framework, severity, confidence, license, and validation status.

Public rules
4797
Downloads
12M
Verified
4797
Authors
2
Search the rule indexUse CVE, GHSA, CWE, language, framework, package, or rule slug.
3 rules matched. Showing 3 loaded rules.
Publish rule
CVE-2026-44328: Nf Instance Id Ephemeral Uuid No Configcve-2026-44328-nf-instance-id-ephemeral-uuid-no-config

An initialization function with no configuration parameter assigns a randomly generated UUID (uuid.New().String()) directly to an NF instance ID field. A non-persistent, non-configurable NF instance ID breaks NRF registration continuity: because OAuth2Required defaults to false and is only set true after successful NRF registration, an ever-changing instance

by Provallyupdated 2026-06-12Apache-2.0
3.5K0 direct3.5K via packs
downloads
75quality
CVE-2026-44322: Free5gc Nef Unset Problemdetails Causecve-2026-44322-free5gc-nef-unset-problemdetails-cause

An error handler extracts the uninitialized `Cause` field from a `ProblemDetails` struct while `Detail` was explicitly provided instead. This outputs an unset structure field, potentially disrupting downstream error handling. Access the initialized `Detail` field, or explicitly initialize `Cause`.

by Provallyupdated 2026-06-12Apache-2.0
3.5K0 direct3.5K via packs
downloads
70quality
CVE-2026-23530: Freerdp Received Capabilities Desync Resizecve-2026-23530-freerdp-received-capabilities-desync-resize

Resizing a single capability buffer (FreeRDP_ReceivedCapabilityData / FreeRDP_ReceivedCapabilities / FreeRDP_ReceivedCapabilityDataSizes) via freerdp_settings_set_pointer_len_ while bumping the shared FreeRDP_ReceivedCapabilitiesSize tracker leaves the three logically parallel arrays out of sync. Later code iterates all of them up to ReceivedCapabilitiesSize

by Provallyupdated 2026-06-12Apache-2.0
3.4K0 direct3.4K via packs
downloads
77quality
All matching rules loaded.