CVE-2026-47902: Discarded Sanitization Result
A sanitization, normalization, or escaping function was called, but its result was assigned to a discarded variable (starting with `_`). This means the sanitized data is ignored, and the original un-sanitized input is likely being used in downstream logic, nullifying the validation. Bind the result to a variable that does not start with `_` and use it instea
greprules fetch cve-2026-47902-discarded-sanitization-result --engine opengrepDescription
A sanitization, normalization, or escaping function was called, but its result was assigned to a discarded variable (starting with `_`). This means the sanitized data is ignored, and the original un-sanitized input is likely being used in downstream logic, nullifying the validation. Bind the result to a variable that does not start with `_` and use it instea
Community feedback
0 signals from signed-in users.
- Useful
- 0
- False positive
- 0
- Metadata
- 0