CVE-2026-10142: Exception Format String Comma

Exception is incorrectly initialized with a string containing format specifiers, but arguments are passed via comma instead of the modulo operator (`%`), `.format()`, or f-strings. This will put a tuple as the exception argument rather than correctly formatting the string, leading to improper error message propagation, or uncaught exceptions (like TypeError

Provally CuratedPublic repositoryHighMedium confidenceVerifiedApache-2.0Python
greprules fetch cve-2026-10142-exception-format-string-comma --engine opengrep

Description

Exception is incorrectly initialized with a string containing format specifiers, but arguments are passed via comma instead of the modulo operator (`%`), `.format()`, or f-strings. This will put a tuple as the exception argument rather than correctly formatting the string, leading to improper error message propagation, or uncaught exceptions (like TypeError