CVE-2026-43891: Falsy Dict Get Validation Bypass

Validation bypass vulnerability. By checking the truthiness of a dictionary value retrieved via `.get()` before running it through a validation function, falsy values (like empty strings) can bypass the validation logic completely. If the dictionary containing these unvalidated falsy values is later processed, it could lead to security issues. Use explicit p

Provally CuratedPublic repositoryHighMedium confidenceVerifiedApache-2.0Python
greprules fetch cve-2026-43891-falsy-dict-get-validation-bypass --engine opengrep

Description

Validation bypass vulnerability. By checking the truthiness of a dictionary value retrieved via `.get()` before running it through a validation function, falsy values (like empty strings) can bypass the validation logic completely. If the dictionary containing these unvalidated falsy values is later processed, it could lead to security issues. Use explicit p