CVE-2025-64530: Improper Subset Validation Some
A function intended to perform a subset check uses `.some()` instead of `.every()`. A subset check requires that all elements of the first set exist in the second set (logical AND). Using `.some()` changes this to an intersection check (logical OR). In access control logic, missing this distinction can lead to security bypasses (e.g., CVE-2025-64530) by allo
JSgreprules fetch cve-2025-64530-improper-subset-validation-some --engine opengrepDescription
A function intended to perform a subset check uses `.some()` instead of `.every()`. A subset check requires that all elements of the first set exist in the second set (logical AND). Using `.some()` changes this to an intersection check (logical OR). In access control logic, missing this distinction can lead to security bypasses (e.g., CVE-2025-64530) by allo
Community feedback
0 rule-level signals from signed-in users.
- Useful reports
- 0
- Context false positives
- 0
- Metadata suggestions
- 0
Contextual precision
Aggregated from approved scan feedback. False-positive reports describe observed scan contexts, not a global rule verdict.
- Findings observed
- 0
- Projects
- 0
- Reporters
- 0
Precision details are collecting more signed-in reports before verdict counts or ratios are emphasized.
No approved finding verdicts yet.
No scan diagnostics reported yet.