Root cause
Validation & fail-open logic introduced
When jsonschema is unavailable, this branch warns and returns without validating the metadata.
openssl_encrypt accepted metadata without schema validation when jsonschema was unavailable. The repair raises a validation error instead of treating the missing dependency as a successful check.
How AI contributed: Direct introductionPublished Feb 10, 2026 in 
jahlives/openssl_encryptAll 20 findings in this repository
Provisional finding. Full causal and release verification remains incomplete.
Fix
Security fix
The repaired branch raises a validation error when the schema validator is unavailable.
Case facts
- CVE ID
- CVE-2026-74875
- GHSA ID
- GHSA-425G-FJHQ-5H92
- Published
- Feb 10, 2026
- Severity
- critical
- Language
- Python
- AI tool
Claude- AI role
- Direct introduction
- Vulnerable release
- < 1.4.0
- Fixed release
- 1.4.0
AI-assisted change
AI-assisted changeopenssl_encrypt/modules/json_validator.pysource jahlives/openssl_encrypt@f5e9c3096a+18−0
@@ -0,0 +223,18 @@+ data (Dict[str, Any]): JSON data to validate+ schema_name (str): Name of schema to validate against++ Raises:+ JSONValidationError: If data doesn't match schema+ """+ if not JSONSCHEMA_AVAILABLE:+ print(+ f"Warning: Cannot validate against schema '{schema_name}' - jsonschema library not available"+ )Show 8 hidden lines
+ return++ if schema_name not in self.schemas:+ raise JSONValidationError(f"Schema '{schema_name}' not found")++ schema = self.schemas[schema_name]++ try:When jsonschema is unavailable, this branch warns and returns without validating the metadata.
Security fix
Fixopenssl_encrypt/modules/json_validator.pysource jahlives/openssl_encrypt@6e7f938dcb+3−3
@@ -231,13 +234,13 @@ Raises: JSONValidationError: If data doesn't match schema """ if not JSONSCHEMA_AVAILABLE:- print(- f"Warning: Cannot validate against schema '{schema_name}' - jsonschema library not available"+ raise JSONValidationError(+ f"Schema validation unavailable: jsonschema library not installed. "+ f"Cannot validate against schema '{schema_name}'" )- return if schema_name not in self.schemas: raise JSONValidationError(f"Schema '{schema_name}' not found") schema = self.schemas[schema_name]The repaired branch raises a validation error when the schema validator is unavailable.
Patch fingerprints
AI-assisted change ce2895e4775527066b60463459f34420ebfaa9e6b6cd313ac04e3dd002ed5e29 · Fix 208e2e74eb08c8aac7950f3af8a22d62509d9dc933ca9f803f769aea7b26cee0