Rule Explorer

A file name read from a content provider (cursor column or URI path segment) flows into a FileOutputStream inside a branch that is authorized solely by comparing the content:// URI authority (host) against a hard-coded string. Any co-installed, permission-less app can register the same provider authority and serve both an attacker-chosen DISPLAY_NAME and att

KotlinCVE-2026-115724CWE-346CWE-441CWE-668

A Docker port publish flag "-p"/"--publish" is built from a two-part host:container mapping with no bind address, so Docker publishes the container port on every host interface (0.0.0.0). Any server inside the container (e.g. an agent/exec API) becomes reachable from every network that can reach the host, and Docker's published-port DNAT rules usually bypass

PythonCVE-2026-112346CWE-306CWE-668

A host builtin module is handed to sandbox code through the read-only containment wrapper without member-level sanitization. A read-only proxy blocks property assignment but forwards every method call to the host realm with full host-process authority, so privileged module members stay reachable from sandbox code: tls.setDefaultCACertificates() swaps the hos

JSNode.jsCVE-2026-92941GHSA-98XX-8MX4-X7CMCWE-250CWE-668

$PKG.Registry is built as a zero value and enabled on a goja runtime, so goja_nodejs's `require` falls back to its default filesystem-backed source loader (os.ReadFile) for every module name that is not registered via RegisterNativeModule. Module names are cleaned and resolved relative to the process working directory and absolute or `..` paths are accepted,

GoCVE-2026-85057CWE-22CWE-668

A constructor annotated with `@DataBoundConstructor` invokes `load()`. Stapler data-binding during HTTP form submission can trigger constructor execution, potentially loading and exposing sensitive configuration data to unauthorized users.

JavaCVE-2026-84658CWE-200CWE-668

The Express application hosting Model Context Protocol (MCP) transports calls `app.listen()` without specifying an explicit host or bind address. In Express, omitting the host defaults to binding on all network interfaces (`0.0.0.0`), exposing MCP tools to any reachable network client. Explicitly bind to a loopback address (e.g., `127.0.0.1`) or enforce inbo

TSExpressCVE-2026-82456CWE-1327CWE-306CWE-668

A call to `psl_is_cookie_domain_acceptable` validates whether a cookie domain is acceptable, but it also returns true for exact Public Suffix List (PSL) domain matches. If the domain is a public suffix, the cookie must be restricted to host-only (non-tailmatching) using `psl_is_public_suffix`. Failing to verify `psl_is_public_suffix` allows cookies set for a

CCVE-2026-82209CWE-201CWE-668

`SubmoduleConfigParser` is instantiated without `merge_includes=False`. This allows untrusted `.gitmodules` files to execute `[include]` directives and read arbitrary local files on the system.

PythonCVE-2026-78675CWE-200CWE-668

Project-scoped secret is labeled with a project ID without assigning the corresponding cluster identifier label, risking cross-cluster secret disclosure.

GoCVE-2026-75033CWE-284CWE-668CWE-863

Calling ListenTCP with hardcoded allInterfaces=true binds the forwarded port listener to all network interfaces (0.0.0.0) instead of restricting it to loopback, exposing forwarded services to network-adjacent hosts.

GoCVE-2026-72924CWE-1327CWE-668

GitHub Copilot instruction frontmatter lacks 'excludeAgent' scoping annotation.

$FUNC is a @csrf_exempt request handler whose only in-view access control is a `settings.DEBUG` check, with no client-origin (loopback / REMOTE_ADDR) restriction anywhere in the view. DEBUG mode is deployment state, not authorization: on any network-reachable interface with DEBUG=True (e.g. a 0.0.0.0-bound staging server), unauthenticated remote clients can

PythonDjangoCVE-2026-61590CWE-306CWE-489CWE-668

Context values are unsafely stored in a mutable array and manipulated via push/pop operations around async boundaries. During concurrent asynchronous rendering, state from different requests can interleave, causing cross-request data leakage. Migrate your context storage to an async-local storage abstraction to isolate state per request.

TSCVE-2026-59896CWE-668

InMemoryListenerConfig is configured without specifying a listen address, which binds the LDAP server to all network interfaces (0.0.0.0). Specify a loopback address using createLDAPConfig(listenerName, InetAddress.getLoopbackAddress(), listenPort, socketFactory) to prevent unintended network exposure.

JavaCVE-2026-59270CWE-1327CWE-668

An embedded or custom Next.js server is started with 'listen()' without specifying a host/hostname to bind to (such as 'localhost' or '127.0.0.1'). By default, Node.js binds to all network interfaces (0.0.0.0 / ::), which may expose internal endpoints and task execution capabilities across the local network.

TSNext.jsCVE-2026-59160CWE-1327CWE-668

KafkaAssemblyOperator reconciliation invokes initialStatus() without first initializing the reconciliation state and cluster security context, omitting security configuration from status.

JavaCVE-2026-55226CWE-284CWE-668

A JVM debug (JDWP) or JMX management port is published on every host interface (host IP 0.0.0.0 / ::) via a Docker port binding, or the JMX remote agent is enabled with authentication disabled and no loopback bind restriction. JDWP has no authentication at all, and a JMX connector started with com.sun.management.jmxremote.authenticate=false is unauthenticate

JavaCVE-2026-47858CWE-306CWE-668

Appending to an array with `$ARR[$ARR.length] = $VAL` invokes [[Set]], which traverses the prototype chain. If Array.prototype[N] has an attacker-installed setter (e.g., from sandbox/cross-realm code), that setter receives the appended value — potentially including sensitive internal state — before the caller regains control. Use Reflect.defineProperty or Ob

JSCVE-2026-44009GHSA-9QJ6-QJGG-37QQCWE-668

`$ARR[$ARR.length] = $VAL` appends to an array via an ordinary index assignment, which walks `Array.prototype` before creating an own slot. In sandbox or cross-realm bridge code, an array literal `[]` allocated inside a closure shared with the untrusted realm inherits that realm's `Array.prototype`. An attacker can pre-install a numeric-index setter (e.g. `O

JSCVE-2026-44008GHSA-9QJ6-QJGG-37QQCWE-668

A file is opened, read, or written through the Go `os` package with a path operand that is produced at runtime from a script-supplied value: a string conversion or a .String() call in the path position. That shape is how an untrusted argument (in Ferret, a value cast out of the FQL arguments with runtime.CastArg) reaches the filesystem API, and because the a

GoCVE-2026-34783CWE-22CWE-668CWE-73

A TCP listener is created with an empty or wildcard host (":<port>", "0.0.0.0:<port>" or "[::]:<port>"), so the service served by this listener accepts connections on every interface of the host. Anyone who can reach the host (a LAN peer, a co-located container via the bridge gateway, or the internet when the port is not firewalled) can invoke the served rou

GoCVE-2026-34042CWE-668CWE-862

Hono node server (or equivalent serve() call) is bound to "0.0.0.0", exposing the service on every network interface. Local developer tools that expose privileged endpoints (process spawn, file access, plugin install) must bind to the loopback address ("127.0.0.1") to prevent remote attackers — including drive-by browser requests from malicious sites — from

TSNode.jsCVE-2026-23744CWE-1327CWE-668

ClusterRoleBinding uses the bare namespaced subject name as its cluster-scoped resource name without namespace qualification. In multi-tenant environments, this can cause naming collisions and allow tenants to hijack or delete cluster-level RBAC bindings.

GoCVE-2026-19274CWE-284CWE-668

The Uvicorn server is configured to bind to all network interfaces ('0.0.0.0' or '::'). This publicly exposes the service on all available interfaces by default. Bind to a loopback host (such as '127.0.0.1') or use a configurable environment variable instead.

PythonCVE-2026-9680CWE-1188CWE-1327CWE-668