Skip to content

Commit 077a780

Browse files
Mark CWE Top 25 in 2019 but not 2021
I ended up identifying the CWEs in 2019 but not 2021, so let's record that information in case we need it later. Signed-off-by: David A. Wheeler <[email protected]>
1 parent 87c3fce commit 077a780

File tree

1 file changed

+11
-8
lines changed

1 file changed

+11
-8
lines changed

secure_software_development_fundamentals.md

Lines changed: 11 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -5290,12 +5290,12 @@ No system is perfect. A complication is that the CWEs identified here are at var
52905290
<tr>
52915291
<td>[21]</td>
52925292
<td><a href="https://cwe.mitre.org/data/definitions/772.html">CWE-772</a></td>
5293-
<td>Missing Release of Resource after Effective Lifetime</td>
5293+
<td>Missing Release of Resource after Effective Lifetime (!)</td>
52945294
</tr>
52955295
<tr>
52965296
<td>[22]</td>
52975297
<td><a href="https://cwe.mitre.org/data/definitions/426.html">CWE-426</a></td>
5298-
<td>Untrusted Search Path</td>
5298+
<td>Untrusted Search Path (!)</td>
52995299
</tr>
53005300
<tr>
53015301
<td>[23]</td>
@@ -5314,6 +5314,8 @@ No system is perfect. A complication is that the CWEs identified here are at var
53145314
</tr>
53155315
</table>
53165316

5317+
Ones marked with (!) are in the 2019 edition but not the 2021 edition.
5318+
53175319

53185320
#### On the Cusp
53195321

@@ -5330,7 +5332,7 @@ Developers that complete mitigation and risk decision-making on the 2019 CWE Top
53305332
<tr>
53315333
<td>[26]</td>
53325334
<td><a href="https://cwe.mitre.org/data/definitions/835.html">CWE-835</a></td>
5333-
<td>Loop with Unreachable Exit Condition (‘Infinite Loop’)</td>
5335+
<td>Loop with Unreachable Exit Condition (‘Infinite Loop’) (!)</td>
53345336
</tr>
53355337
<tr>
53365338
<td>[27]</td>
@@ -5340,7 +5342,7 @@ Developers that complete mitigation and risk decision-making on the 2019 CWE Top
53405342
<tr>
53415343
<td>[28]</td>
53425344
<td><a href="https://cwe.mitre.org/data/definitions/704.html">CWE-704</a></td>
5343-
<td>Incorrect Type Conversion or Cast</td>
5345+
<td>Incorrect Type Conversion or Cast (!)</td>
53445346
</tr>
53455347
<tr>
53465348
<td>[29]</td>
@@ -5355,7 +5357,7 @@ Developers that complete mitigation and risk decision-making on the 2019 CWE Top
53555357
<tr>
53565358
<td>[31]</td>
53575359
<td><a href="https://cwe.mitre.org/data/definitions/415.html">CWE-415</a></td>
5358-
<td>Double Free</td>
5360+
<td>Double Free (!)</td>
53595361
</tr>
53605362
<tr>
53615363
<td>[32]</td>
@@ -5385,12 +5387,12 @@ Developers that complete mitigation and risk decision-making on the 2019 CWE Top
53855387
<tr>
53865388
<td>[37]</td>
53875389
<td><a href="https://cwe.mitre.org/data/definitions/384.html">CWE-384</a></td>
5388-
<td>Session Fixation</td>
5390+
<td>Session Fixation (!)</td>
53895391
</tr>
53905392
<tr>
53915393
<td>[38]</td>
53925394
<td><a href="https://cwe.mitre.org/data/definitions/326.html">CWE-326</a></td>
5393-
<td>Inadequate Encryption Strength</td>
5395+
<td>Inadequate Encryption Strength (!)</td>
53945396
</tr>
53955397
<tr>
53965398
<td>[39]</td>
@@ -5400,10 +5402,11 @@ Developers that complete mitigation and risk decision-making on the 2019 CWE Top
54005402
<tr>
54015403
<td>[40]</td>
54025404
<td><a href="https://cwe.mitre.org/data/definitions/617.html">CWE-617</a></td>
5403-
<td>Reachable Assertion</td>
5405+
<td>Reachable Assertion (!)</td>
54045406
</tr>
54055407
</table>
54065408

5409+
Ones marked with (!) are in the 2019 edition but not the 2021 edition.
54075410

54085411
# References
54095412

0 commit comments

Comments
 (0)