CVE-2026-45046: Gryph Missing Audit Log For Blocked Action

A security evaluation block condition returns without logging the blocked event to the data store. This leads to silent audit bypasses where malicious actions are dropped without a trace. Ensure `SaveEvent` or equivalent audit logging is performed before returning.

Provally CuratedPublic repositoryMediumMedium confidenceVerifiedApache-2.0Goβ
greprules fetch cve-2026-45046-gryph-missing-audit-log-for-blocked-action --engine opengrep

Description

A security evaluation block condition returns without logging the blocked event to the data store. This leads to silent audit bypasses where malicious actions are dropped without a trace. Ensure `SaveEvent` or equivalent audit logging is performed before returning.