CVE-2026-54526: Reflect Struct Sanitization Incomplete Allowlistcve-2026-54526-reflect-struct-sanitization-incomplete-allowlist
Reflection-based struct sanitization copies fields matching an allowlist without validating or sanitizing nested struct fields. If an allowed field is a complex struct or pointer containing security-sensitive parameters, those parameters will bypass sanitization. Ensure nested fields are explicitly sanitized or stripped after top-level copying.
