CVE-2026-55830: Ast Missing Posonlyargs

This code processes standard AST regular arguments (`.args.args`) but does not handle positional-only arguments (`.posonlyargs`), which were introduced in Python 3.8. Omitting this validation can lead to sandbox bypasses, unnoticed arguments, or faulty code transformations. Ensure `.posonlyargs` are also checked.

Provally CuratedPublic repositoryHighMedium confidenceVerifiedApache-2.0Python
greprules fetch cve-2026-55830-ast-missing-posonlyargs --engine opengrep

Description

This code processes standard AST regular arguments (`.args.args`) but does not handle positional-only arguments (`.posonlyargs`), which were introduced in Python 3.8. Omitting this validation can lead to sandbox bypasses, unnoticed arguments, or faulty code transformations. Ensure `.posonlyargs` are also checked.