CVE-2026-49130: Insufficient Crlf Validation Empty Checkcve-2026-49130-insufficient-crlf-validation-empty-check
A variable is appended to a list after validating only that it is not empty. When handling inputs like parsed URIs from untrusted payloads, checking for `.empty()` or `.size() > 0` is insufficient to prevent control-character injections (such as CRLF). Ensure the input is explicitly validated against newlines and appropriate semantic constraints.
