CWE-1100: Insufficient Isolation of System-Dependent Functions
The product or code does not isolate system-dependent functionality into separate standalone modules.
A kind of CWE-1061 Insufficient Encapsulation.
From the CWE List. © The MITRE Corporation.
Newest
- patriksimek vm2, red hat ansible automation platform 2.1, developer hub +2 more vm2 has sandbox breakout via `neutralizeArraySpeciesBatch` 9.8 Critical
- patriksimek vm2, red hat ansible automation platform 2.1, developer hub +2 more vm2: nesting: true bypasses require: false, allowing sandbox escape to arbitrary OS command execution 9.1 Critical
- langgenius dify, langgenius/dify +1 more Unsanitized Input in langgenius/dify 9.8 Critical
- danswer-ai danswer-ai/danswer, onyx +1 more Unauthorized Access in danswer-ai/danswer 6.5 Medium
- hashicorp nomad Improper network isolation in Hashicorp Nomad 6.5 Medium