Gold Open Source
ExplorePackagesVulnerabilitiesMCP Servers
Login
Gold Open Source

The authoritative source for production-ready open-source components. Every package, container image, AI model, and MCP server undergoes rigorous verification for security, malware, and license compliance.

Explore Gold

  • Explore Everything
  • Packages
  • Gold Packages
  • Container Images
  • AI Models
  • MCP Servers
  • Agent Skills
  • Chip Manufacturers

Security Data & Tools

  • Scan Your Dependencies
  • Trending Threats
  • Threat RSS Feeds
  • CVE Database
  • Actively Exploited (KEV)
  • SGZ Zero-Days
  • CWE Index
  • MITRE ATT&CK
  • Malicious Packages
  • Security Glossary
  • Supply-Chain Report
  • Developers (API & Badge)
  • Chrome Extension
  • Credits & Data Sources

Products

  • The Platform
  • ESSCM
  • Portal
  • TPRM
  • OSM
  • Cowork
  • Code / Runner
  • Guard

Use Cases

  • Know Your Software
  • Auto-Fix Vulnerabilities
  • Asset Discovery
  • AI Governance
  • MCP Server Security
  • Supply Chain Compliance
  • Zero-Day Discovery
  • All Use Cases

Company

  • About
  • Pricing
  • Blog
  • Documentation
  • Safeguard Academy
  • Contact
  • Privacy Policy
  • Terms of Service

© 2026 Gold Open Source. All rights reserved.

Built with care bySafeguard
Home/CWEs/CWE-915
Common Weakness Enumeration

CWE-915: Improperly Controlled Modification of Dynamically-Determined Object Attributes

ShareXLinkedInRedditHN

The product receives input from an upstream component that specifies multiple attributes, properties, or fields that are to be initialized or updated in an object, but it does not properly control which attributes can be modified.

Abstraction
Base
Related CVEs
14

▪ References & documentation

MITRE CWE definitionNVD CWE listing

▪ Related CVEs

CVE-2026-27125Medium

Security vulnerability in svelte

CVE-2026-27125Medium

Security vulnerability in svelte

CVE-2026-27125Medium

Security vulnerability in svelte

CVE-2026-27125Medium

Security vulnerability in svelte

CVE-2026-27125Medium

Security vulnerability in svelte

CVE-2026-27125Medium

Security vulnerability in svelte

CVE-2026-42044Medium

Security vulnerability in axios

CVE-2026-42044Medium

Security vulnerability in axios

CVE-2026-42044Medium

Security vulnerability in axios

CVE-2026-42044Medium

Security vulnerability in axios

CVE-2026-42044Medium

Security vulnerability in axios

CVE-2026-42044Medium

Security vulnerability in axios

CVE-2026-54516Medium

Security vulnerability in jackson-databind

CVE-2026-54515Medium

Security vulnerability in jackson-databind