CVE-2026-81852: Components Layouts Ex Cwe 000 Cve 2026 81852

A hardcoded string constant is being used as a Content Security Policy (CSP) nonce. CSP nonces must be cryptographically random and unique per request. Hardcoded or predictable nonces allow attackers to bypass CSP script execution protections.

Provally CuratedPublic repositoryMediumHigh confidenceVerifiedApache-2.0Elixir
greprules fetch cve-2026-81852-components-layouts-ex-cwe-000-cve-2026-81852 --engine opengrep

Description

A hardcoded string constant is being used as a Content Security Policy (CSP) nonce. CSP nonces must be cryptographically random and unique per request. Hardcoded or predictable nonces allow attackers to bypass CSP script execution protections.