CVE-2026-22259: Incomplete Tx State Check

Transaction progress check relies on the 'complete' flag instead of 'done'. This may lead to memory leaks on errored or malformed transactions that are never marked as 'complete' and thus never freed by the application layer framework.

Provally CuratedPublic repositoryHighMedium confidenceVerifiedApache-2.0C
greprules fetch cve-2026-22259-incomplete-tx-state-check --engine opengrep

Description

Transaction progress check relies on the 'complete' flag instead of 'done'. This may lead to memory leaks on errored or malformed transactions that are never marked as 'complete' and thus never freed by the application layer framework.