Explore

Rule Explorer

Search the public rule index by CVE, GHSA, CWE, language, framework, author, or rule slug. Filter by language, framework, severity, confidence, license, and validation status.

Public rules
4797
Downloads
7.5M
Verified
4797
Authors
2
Search the rule indexUse CVE, GHSA, CWE, language, framework, package, or rule slug.
1 rules matched. Showing 1 loaded rules.
Publish rule
CVE-2026-22660: Json Set Intersection Type Mismatchcve-2026-22660-json-set-intersection-type-mismatch

Comparing JSON input arrays against a collection of string literals using set intersection causes a type mismatch bypass if the JSON contains numbers. JSON preserves integer types, resulting in empty intersections when integers are checked against string literals, potentially bypassing authorization checks. Cast the JSON elements to the appropriate type befo

by Provallyupdated 2026-09-02Apache-2.0
2830 direct283 via packs
downloads
81quality
All matching rules loaded.