CVE-2026-81701: Python Security Denylist Trust Decision Default Allowcve-2026-81701-python-security-denylist-trust-decision-default-allow
Trust predicate `$FUNC` fails open: its only rejection path is a positive membership test against a denylist constant (`$ITEM in $DENYLIST`), followed by an unconditional `return True`. Any value not on the denylist — an unknown/new name, a path with no directory component, or a casing variant on a case-sensitive filesystem — is trusted by default. When this
