GrepRules
Sign inPublish rule
Explore

Rule Explorer

Search the public rule index by CVE, GHSA, CWE, language, framework, author, or rule slug. Filter by language, framework, severity, confidence, license, and validation status.

Public rules
2917
Downloads
3.3M
Verified
2917
Authors
2
Search the rule indexUse CVE, GHSA, CWE, language, framework, package, or rule slug.
1 rules matched. Showing 1 loaded rules.
Publish rule
CVE-2026-43948: Django Modelform Instance Field Tautological Comparisoncve-2026-43948-django-modelform-instance-field-tautological-comparison

`form.instance.FIELD` always holds the pre-submission value of the bound instance because Django ModelForm.is_valid() never mutates the instance. When `form = SomeForm(data=request.POST, instance=obj)`, then `form.instance` IS `obj`, so `obj.FIELD != form.instance.FIELD` is a tautological comparison that is permanently False. Any email-verification, change-d

PythonCVE-2026-43948CWE-863
by Provallyupdated 2026-06-12Apache-2.0
1.2K0 direct1.2K via packs
78
All matching rules loaded.