CWE-1116: Inaccurate Source Code Comments
Filter
The source code contains comments that do not accurately describe or explain aspects of the portion of the code with which the comment is associated.
What the weakness is: CWE-1116 at MITRE. All weaknesses
Ask an AI about CWE-1116
Show the prompt
Explain CWE-1116: Inaccurate Source Code Comments and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/1116.html and https://cve.bz/cve/cwe/1116?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.
- 8.6CVE-2026-63345EPSS 0.4%
Refitter is a tool for generating a C# REST API client using the Refit library. Prior to 2.1.2, OpenAPI `paths`-object keys are emitted verbatim into Refit route attributes such as `[Get("<path>")]` without escaping quotation marks or rest…
- 6.3CVE-2025-47271EPSS 0.4%
The OZI action is a GitHub Action that publishes releases to PyPI and mirror releases, signature bundles, and provenance in a tagged release. In versions 1.13.2 through 1.13.5, potentially untrusted data flows into PR creation logic. A mal…
- 6.3CVE-2025-1219EPSS 0.7%
In PHP from 8.1.* before 8.1.32, from 8.2.* before 8.2.28, from 8.3.* before 8.3.19, from 8.4.* before 8.4.5, when requesting a HTTP resource using the DOM or SimpleXML extensions, the wrong content-type header is used to determine the cha…
- 7.5CVE-2022-30351EPSS 0.6%
PDFZorro PDFZorro Online r20220428 using TCPDF 6.2.5, despite having workflows claiming to correctly remove redacted information from a supplied PDF file, does not properly sanitize this information in all cases, causing redacted informati…
- 7.8CVE-2022-48339EPSS 1.1%
An issue was discovered in GNU Emacs through 28.2. htmlfontify.el has a command injection vulnerability. In the hfy-istext-command function, the parameter file and parameter srcdir come from external input, and parameters are not escaped. …