CVE-2026-48747: Insecure Hash Hmac Algo Downgradecve-2026-48747-insecure-hash-hmac-algo-downgrade
Dynamically populated hashing algorithms from external inputs or parsed strings can lead to cryptographic downgrade attacks. An attacker may force the application to use a weaker algorithm (e.g., 'md5') when validating signatures. Enforce strong algorithms by hardcoding the expected algorithm (e.g., 'sha256') or validating it strictly against an allowlist be
