Gold Open Source
ExplorePackagesVulnerabilitiesMCP Servers
Login
Gold Open Source

The authoritative source for production-ready open-source components. Every package, container image, AI model, and MCP server undergoes rigorous verification for security, malware, and license compliance.

Explore Gold

  • Explore Everything
  • Packages
  • Gold Packages
  • Container Images
  • AI Models
  • MCP Servers
  • Agent Skills
  • Chip Manufacturers

Security Data & Tools

  • Scan Your Dependencies
  • Trending Threats
  • Threat RSS Feeds
  • CVE Database
  • Actively Exploited (KEV)
  • SGZ Zero-Days
  • CWE Index
  • MITRE ATT&CK
  • Malicious Packages
  • Security Glossary
  • Supply-Chain Report
  • Developers (API & Badge)
  • Chrome Extension
  • Credits & Data Sources

Products

  • The Platform
  • ESSCM
  • Portal
  • TPRM
  • OSM
  • Cowork
  • Code / Runner
  • Guard

Use Cases

  • Know Your Software
  • Auto-Fix Vulnerabilities
  • Asset Discovery
  • AI Governance
  • MCP Server Security
  • Supply Chain Compliance
  • Zero-Day Discovery
  • All Use Cases

Company

  • About
  • Pricing
  • Blog
  • Documentation
  • Safeguard Academy
  • Contact
  • Privacy Policy
  • Terms of Service

© 2026 Gold Open Source. All rights reserved.

Built with care bySafeguard
Home/CWEs/CWE-180
Common Weakness Enumeration

CWE-180: Incorrect Behavior Order: Validate Before Canonicalize

ShareXLinkedInRedditHN

The product validates input before it is canonicalized, which prevents the product from detecting data that becomes invalid after the canonicalization step.

Abstraction
Variant
Related CVEs
10

▪ References & documentation

MITRE CWE definitionNVD CWE listing

▪ How attackers exploit CWE-180

MITRE ATT&CK techniques associated with this weakness class (mapped via MITRE CAPEC). A vulnerability of this type could let an adversary carry out:

T1027Obfuscated Files or Informationstealth

▪ Related CVEs

CVE-2026-34786Medium

Security vulnerability in rack

CVE-2026-102269Medium

Security vulnerability in pyjwt

CVE-2026-102269Medium

Security vulnerability in pyjwt

CVE-2026-102269Medium

Security vulnerability in pyjwt

CVE-2026-34786Medium

Security vulnerability in rack

CVE-2026-39409Medium

Security vulnerability in hono

CVE-2026-39409Medium

Security vulnerability in hono

CVE-2026-39409Medium

Security vulnerability in hono

CVE-2026-39364High

Security vulnerability in vite

GHSA-hxm8-2xgr-2p9mMedium

Security vulnerability in pyjwt