CVE-2025-6224: Go Hash Sum Api Misuse Leakcve-2025-6224-go-hash-sum-api-misuse-leak
Calling `.Sum(data)` directly on a newly created `hash.Hash` without calling `.Write()` does not hash `data`. Instead, it computes the hash of an empty string and appends it to `data`. This unintentionally embeds and leaks `data` in plaintext. If `data` is a sensitive value like a private key, this compromises cryptographic secrets. To hash data correctly, e
