CVE-2026-60113: Python Missing Return After Error Status

An HTTP error status is set on the response, but execution is not halted. This causes a fall-through to the remaining code, potentially bypassing authorization or state checks. Use `return`, `raise`, or an `else` block to prevent unauthorized execution of sensitive logic.

Provally CuratedPublic repositoryHighMedium confidenceVerifiedApache-2.0Python
greprules fetch cve-2026-60113-python-missing-return-after-error-status --engine opengrep

Description

An HTTP error status is set on the response, but execution is not halted. This causes a fall-through to the remaining code, potentially bypassing authorization or state checks. Use `return`, `raise`, or an `else` block to prevent unauthorized execution of sensitive logic.