Explore

Rule Explorer

Search the public rule index by CVE, GHSA, CWE, language, framework, author, or rule slug. Filter by language, framework, severity, confidence, license, and validation status.

Public rules
6965
Downloads
12.9M
Verified
6965
Authors
2
Search the rule indexUse CVE, GHSA, CWE, language, framework, package, or rule slug.
1 rules matched. Showing 1 loaded rules.
Publish rule
CVE-2026-100651: Python Security Unconditional Skip Flag Bypasses Role Specific Validationcve-2026-100651-python-security-unconditional-skip-flag-bypasses-role-specific-validation

$FUNC short-circuits on the skip flag `$SKIP` without scoping the skip to the role it was meant to exempt (`$ROLE`). The early return is guarded by the bare flag alone, so it suppresses every later check in $FUNC, including the validation keyed on the role discriminator, and inputs of the still-regulated role reach the engine unvalidated. Scope the early ret

by Provallyupdated 2026-10-27Apache-2.0
500 direct50 via packs
downloads
79quality
All matching rules loaded.