CWE-1038
Insecure Automated Optimizations
The product uses a mechanism that automatically optimizes code, e.g. to improve a characteristic such as performance, but the optimizations can have an unintended side effect that might violate an intended security assumption.
Impactr finds and proves whether CWE-1038 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.