CVE-2026-56864: Sumdb Lookup Unverified Data Cached

Raw response data is cached/returned instead of verified record text from tlog.ParseRecord, allowing unauthenticated checksum lines to be accepted.

Provally CuratedPublic repositoryMediumMedium confidenceVerifiedApache-2.0Go
greprules fetch cve-2026-56864-sumdb-lookup-unverified-data-cached --engine opengrep

Description

Raw response data is cached/returned instead of verified record text from tlog.ParseRecord, allowing unauthenticated checksum lines to be accepted.