CVE-2026-45405: Untrusted Env Var As Security Limit
Configuring dynamic security limits (e.g. MAX_SIZE) via environment variables can be dangerous if the script is tied to an execution context that allows arbitrary environment variable injection (e.g. SSH daemon configs passing SendEnv). Avoid relying on unverified environment variables for critical security constraints such as resource limits. Consider using
Bashgreprules fetch cve-2026-45405-untrusted-env-var-as-security-limit --engine opengrepDescription
Configuring dynamic security limits (e.g. MAX_SIZE) via environment variables can be dangerous if the script is tied to an execution context that allows arbitrary environment variable injection (e.g. SSH daemon configs passing SendEnv). Avoid relying on unverified environment variables for critical security constraints such as resource limits. Consider using
Community feedback
0 rule-level signals from signed-in users.
- Useful reports
- 0
- Context false positives
- 0
- Metadata suggestions
- 0
Contextual precision
Aggregated from approved scan feedback. False-positive reports describe observed scan contexts, not a global rule verdict.
- Findings observed
- 0
- Projects
- 0
- Reporters
- 0
Precision details are collecting more signed-in reports before verdict counts or ratios are emphasized.
No approved finding verdicts yet.
No scan diagnostics reported yet.