CVE-2026-49130: Insufficient Crlf Validation Empty Check
A variable is appended to a list after validating only that it is not empty. When handling inputs like parsed URIs from untrusted payloads, checking for `.empty()` or `.size() > 0` is insufficient to prevent control-character injections (such as CRLF). Ensure the input is explicitly validated against newlines and appropriate semantic constraints.
C++greprules fetch cve-2026-49130-insufficient-crlf-validation-empty-check --engine opengrepDescription
A variable is appended to a list after validating only that it is not empty. When handling inputs like parsed URIs from untrusted payloads, checking for `.empty()` or `.size() > 0` is insufficient to prevent control-character injections (such as CRLF). Ensure the input is explicitly validated against newlines and appropriate semantic constraints.
Community feedback
0 rule-level signals from signed-in users.
- Useful reports
- 0
- Context false positives
- 0
- Metadata suggestions
- 0
Contextual precision
Aggregated from approved scan feedback. False-positive reports describe observed scan contexts, not a global rule verdict.
- Findings observed
- 0
- Projects
- 0
- Reporters
- 0
Precision details are collecting more signed-in reports before verdict counts or ratios are emphasized.
No approved finding verdicts yet.
No scan diagnostics reported yet.