CVE-2026-47902: Discarded Sanitization Result

A sanitization, normalization, or escaping function was called, but its result was assigned to a discarded variable (starting with `_`). This means the sanitized data is ignored, and the original un-sanitized input is likely being used in downstream logic, nullifying the validation. Bind the result to a variable that does not start with `_` and use it instea

Provally CuratedPublic repositoryMediumMedium confidenceVerifiedApache-2.0Rustβ
greprules fetch cve-2026-47902-discarded-sanitization-result --engine opengrep

Description

A sanitization, normalization, or escaping function was called, but its result was assigned to a discarded variable (starting with `_`). This means the sanitized data is ignored, and the original un-sanitized input is likely being used in downstream logic, nullifying the validation. Bind the result to a variable that does not start with `_` and use it instea