CVE-2026-54147: Hardcoded Md5 With Configured Algorithm

MessageDigest.getInstance("MD5") is hardcoded in a class that specifies an algorithm parameter, ignoring the configured algorithm.

Provally CuratedPublic repositoryMediumMedium confidenceVerifiedApache-2.0Kotlin
greprules fetch cve-2026-54147-hardcoded-md5-with-configured-algorithm --engine opengrep

Description

MessageDigest.getInstance("MD5") is hardcoded in a class that specifies an algorithm parameter, ignoring the configured algorithm.