Gold Open Source
ExplorePackagesVulnerabilitiesMCP Servers
Login
Gold Open Source

The authoritative source for production-ready open-source components. Every package, container image, AI model, and MCP server undergoes rigorous verification for security, malware, and license compliance.

Explore Gold

  • Explore Everything
  • Packages
  • Gold Packages
  • Container Images
  • AI Models
  • MCP Servers
  • Agent Skills
  • Chip Manufacturers

Security Data & Tools

  • Scan Your Dependencies
  • Trending Threats
  • Threat RSS Feeds
  • CVE Database
  • Actively Exploited (KEV)
  • SGZ Zero-Days
  • CWE Index
  • MITRE ATT&CK
  • Malicious Packages
  • Security Glossary
  • Supply-Chain Report
  • Developers (API & Badge)
  • Chrome Extension
  • Credits & Data Sources

Products

  • The Platform
  • ESSCM
  • Portal
  • TPRM
  • OSM
  • Cowork
  • Code / Runner
  • Guard

Use Cases

  • Know Your Software
  • Auto-Fix Vulnerabilities
  • Asset Discovery
  • AI Governance
  • MCP Server Security
  • Supply Chain Compliance
  • Zero-Day Discovery
  • All Use Cases

Company

  • About
  • Pricing
  • Blog
  • Documentation
  • Safeguard Academy
  • Contact
  • Privacy Policy
  • Terms of Service

© 2026 Gold Open Source. All rights reserved.

Built with care bySafeguard
Home/CWEs/CWE-674
Common Weakness Enumeration

CWE-674: Uncontrolled Recursion

ShareXLinkedInRedditHN

The product does not properly control the amount of recursion that takes place, consuming excessive resources, such as allocated memory or the program stack.

Abstraction
Class
Related CVEs
43

▪ References & documentation

https://cwe.mitre.org/data/definitions/674.htmlNVD CWE listing

▪ How attackers exploit CWE-674

MITRE ATT&CK techniques associated with this weakness class (mapped via MITRE CAPEC). A vulnerability of this type could let an adversary carry out:

T1499Endpoint Denial of Serviceimpact

Step-by-step: how CWE-674 gets exploited

A stage-by-stage walkthrough of the attack, mapped to the real MITRE ATT&CK tactics for this weakness — what the attacker is trying to do, what's at risk (what can be stolen or damaged), and how you defend. Understanding the playbook is how you shut it down.

  1. 1
    Impactimpact

    Cause damage — destroy, encrypt, deny, or manipulate.

    At risk / what's stolen

    Availability and integrity: ransomware encryption, data wiping, or service denial.

    How you defend

    Tested offline backups, integrity checks, and rate/abuse limiting.

This is a defensive, conceptual walkthrough for education — stages reflect MITRE ATT&CK tactics associated with this weakness class, not a working exploit. Not every attack uses every stage.

▪ Related CVEs

CVE-2026-33532Medium

Security vulnerability in yaml

CVE-2018-20993High

Security vulnerability in yaml-rust

CVE-2026-67321High

Security vulnerability in axios

CVE-2026-32141High

Security vulnerability in flatted

CVE-2026-33532Medium

Security vulnerability in yaml

CVE-2026-32141High

Security vulnerability in flatted

CVE-2026-42039High

Security vulnerability in axios

CVE-2026-32141High

Security vulnerability in flatted

CVE-2026-32141High

Security vulnerability in flatted

CVE-2026-32141High

Security vulnerability in flatted

CVE-2026-42039High

Security vulnerability in axios

CVE-2026-67321High

Security vulnerability in axios

CVE-2026-33532Medium

Security vulnerability in yaml

CVE-2026-54269Medium

Security vulnerability in protobufjs

CVE-2026-48712High

Security vulnerability in protobufjs

CVE-2026-45740Medium

Security vulnerability in protobufjs

CVE-2026-44289High

Security vulnerability in protobufjs

CVE-2026-67321High

Security vulnerability in axios

CVE-2026-18140High

Security vulnerability in aws-smithy-json

CVE-2026-18140High

Security vulnerability in aws-smithy-json

CVE-2026-42039High

Security vulnerability in axios

CVE-2026-42039High

Security vulnerability in axios

CVE-2026-42039High

Security vulnerability in axios

CVE-2026-42039High

Security vulnerability in axios

CVE-2026-54269Medium

Security vulnerability in protobufjs

CVE-2026-42039High

Security vulnerability in axios

GHSA-8wjv-2p76-3863Medium

Security vulnerability in pyjwt

CVE-2026-33532Medium

Security vulnerability in yaml

CVE-2026-33532Medium

Security vulnerability in yaml

CVE-2018-0739Medium

Security vulnerability in openssl

CVE-2026-18140High

Security vulnerability in aws-smithy-json

GHSA-62hf-57xw-28j9High

Security vulnerability in axios

CVE-2026-32141High

Security vulnerability in flatted

CVE-2026-42039High

Security vulnerability in axios

CVE-2026-33532Medium

Security vulnerability in yaml

CVE-2018-0739Medium

Security vulnerability in openssl

CVE-2026-15830Medium

Security vulnerability in django

CVE-2026-75655High

Security vulnerability in bridge

CVE-2026-30922High

Security vulnerability in pyasn1

CVE-2026-54269Medium

Security vulnerability in protobufjs

CVE-2026-48712High

Security vulnerability in protobufjs

CVE-2026-24401Medium

Security vulnerability in avahi

CVE-2026-54297High

Security vulnerability in faraday