{"meta":{"title":"CWEs used by GitHub's preset Dependabot rules","intro":"GitHub uses industry-standard criteria to help you filter Dependabot alerts.","product":"Security and code quality","breadcrumbs":[{"href":"/en/code-security","title":"Security and code quality"},{"href":"/en/code-security/reference","title":"Reference"},{"href":"/en/code-security/reference/supply-chain-security","title":"Supply chain security"},{"href":"/en/code-security/reference/supply-chain-security/criteria-for-preset-rules","title":"Criteria for preset rules"}],"documentType":"article"},"body":"# CWEs used by GitHub's preset Dependabot rules\n\nGitHub uses industry-standard criteria to help you filter Dependabot alerts.\n\n## `Dismiss low impact issues for development-scoped dependencies`\n\nThe `Dismiss low impact issues for development-scoped dependencies` rule is a GitHub preset that auto-dismisses certain types of vulnerabilities that are found in npm dependencies used in development.\n\nAlong with the `ecosystem:npm` and `scope:development` alert metadata, we use the following GitHub-curated Common Weakness Enumerations (CWEs) to filter out low impact alerts for the `Dismiss low impact issues for development-scoped dependencies` rule. We regularly improve this list and vulnerability patterns covered by built-in rules.\n\n### Resource Management Issues\n\n* CWE-400 Uncontrolled Resource Consumption\n* CWE-770 Allocation of Resources Without Limits or Throttling\n* CWE-409 Improper Handling of Highly Compressed Data (Data Amplification)\n* CWE-908 Use of Uninitialized Resource\n* CWE-1333 Inefficient Regular Expression Complexity\n* CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')\n* CWE-674 Uncontrolled Recursion\n* CWE-1119 Excessive Use of Unconditional Branching\n\n### Programming and Logic Errors\n\n* CWE-185 Incorrect Regular Expression\n* CWE-754 Improper Check for Unusual or Exceptional Conditions\n* CWE-755 Improper Handling of Exceptional Conditions\n* CWE-248 Uncaught Exception\n* CWE-252 Unchecked Return Value\n* CWE-391 Unchecked Error Condition\n* CWE-696 Incorrect Behavior Order\n* CWE-1254 Incorrect Comparison Logic Granularity\n* CWE-665 Improper Initialization\n* CWE-703 Improper Check or Handling of Exceptional Conditions\n* CWE-178 Improper Handling of Case Sensitivity\n\n### Information Disclosure Issues\n\n* CWE-544 Missing Standardized Error Handling Mechanism\n* CWE-377 Insecure Temporary File\n* CWE-451 User Interface (UI) Misrepresentation of Critical Information\n* CWE-668 Exposure of Resource to Wrong Sphere"}