CWE-1126
Declaration of Variable with Unnecessarily Wide Scope
The source code declares a variable in one scope, but the variable is only used within a narrower scope.
Impactr finds and proves whether CWE-1126 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.