CVE-2026-114108: Python Fastapi Auth Dependency Fail Opencve-2026-114108-python-fastapi-auth-dependency-fail-open
Auth dependency $FUNC fails open: when the configured credential ($KEY) is unset, the guard `if not $KEY: return` ends the check without rejecting the request or restricting it to loopback clients. On any network-reachable deployment the whole protected API surface is then served unauthenticated. Fail closed instead: raise when the credential is not configur