CVE-2026-73228: Python2 Six Text Type Length Check Bypass

Checking string length against 'six.text_type' instead of 'six.string_types' allows byte strings to bypass length limits under Python 2, potentially leading to DoS.

Provally CuratedPublic repositoryMediumMedium confidenceVerifiedApache-2.0Python
greprules fetch cve-2026-73228-python2-six-text-type-length-check-bypass --engine opengrep

Description

Checking string length against 'six.text_type' instead of 'six.string_types' allows byte strings to bypass length limits under Python 2, potentially leading to DoS.