Rule Explorer

An early return triggered by a mismatch in `crypto_ahash_statesize` bypasses subsequent resource cleanup routines, causing a session reference count leak. In cryptodev-linux, this resulted in CVE-2026-28529. Ensure that validations properly release resources before returning, or remove the redundant check to securely delegate validation to the processing fun

CCVE-2026-28529CWE-404CWE-416

A database session or connection is created and closed manually but is not wrapped in a `try...finally` block. If an exception occurs before `.close()` is called, the connection will leak. Over time, leaked connections can exhaust the connection pool and cause a Denial of Service (DoS). Ensure that you wrap the usage in a `try...finally` block and call `.clo

PythonCVE-2026-23842CWE-400CWE-404