Eresus Sentinel Rule Documentation

CWE Mapping

This table cross-references CWE IDs to Sentinel detection rules.

How to use this table

CWE identifies the technical weakness family; Sentinel rule ID explains how that weakness was detected in an AI/ML context. CWE gives customer reports a common language, while Sentinel rule IDs give engineering issues retestable evidence.

CWE links point to MITRE's official CWE definitions.

CWE	Sentinel Rules
CWE-20	SAFETENSORS-DTYPE-SHAPE-MISMATCH
CWE-22	ONNX-EXTERNAL-DATA-PATH 7Z-PATH-TRAVERSAL COMPRESSED-ZIP-SLIP RAR-PATH-TRAVERSAL
CWE-59	7Z-SYMLINK-ESCAPE
CWE-94	TORCH-SCRIPT-CUSTOM-OP ONNX-CUSTOM-OP GGUF-JINJA-TEMPLATE JIT-DYNAMIC-KERNEL JINJA2-SSTI-001 JINJA2-UNSANDBOXED-TEMPLATE
CWE-95	JIT-EVAL-COMPILE
CWE-190	GGUF-METADATA-OVERFLOW
CWE-200	NET-PRIVATE-RANGE-EGRESS JINJA2-SECRET-EXPOSURE MODEL-SECRET-PII
CWE-250	OCI-ROOT-USER
CWE-266	MANIFEST-OVERBROAD-TOOLS
CWE-345	ONNX-METADATA-TAMPER SAFETENSORS-MISSING-HASH GGUF-UNTRUSTED-QUANT JIT-CACHE-POISONING
CWE-353	MANIFEST-MISSING-INTEGRITY
CWE-400	SAFETENSORS-HEADER-OVERFLOW COMPRESSED-NESTED-DEPTH SCAN-SIZE-MAX-FILE
CWE-409	7Z-BOMB COMPRESSED-DECOMPRESSION-BOMB RAR-BOMB SCAN-SIZE-ARCHIVE-RATIO
CWE-477	SYM-UNRESOLVED-ENTRYPOINT
CWE-494	TORCH-HUB-DYNAMIC-IMPORT NET-UNPINNED-MODEL-URL OCI-UNPINNED-BASE
CWE-502	PICKLE-EXEC PICKLE-GLOBAL-IMPORT TORCH-LOAD-UNTRUSTED
CWE-522	MODEL-SECRET-PRIVATE-KEY
CWE-693	RAR-ENCRYPTED-PAYLOAD
CWE-749	SYM-DANGEROUS-EXPORT
CWE-770	SAFETENSORS-HEADER-OVERFLOW SCAN-SIZE-TENSOR-DIMENSION
CWE-787	GGUF-METADATA-OVERFLOW
CWE-798	OCI-SECRET-IN-LAYER MODEL-SECRET-API-KEY
CWE-829	PICKLE-GLOBAL-IMPORT TORCH-SCRIPT-CUSTOM-OP TORCH-HUB-DYNAMIC-IMPORT ONNX-CUSTOM-OP SYM-NATIVE-LOAD-HOOK MANIFEST-REMOTE-CODE
CWE-915	PICKLE-STRUCT
CWE-918	NET-METADATA-ENDPOINT
CWE-1104	CVE-KNOWN-EXPLOITED CVE-VULNERABLE-RUNTIME CVE-STALE-ADVISORY-DATA

PreviousSeverity Guide