CWE-772
Missing Release of Resource after Effective Lifetime
The product does not release a resource after its effective lifetime has ended, i.e., after the resource is no longer needed.
Impactr finds and proves whether CWE-772 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.