Malformed hash values pass the validator

oasis-open / cti-pattern-validator

OASIS TC Open Repository: Validate patterns used to express cyber observable content in STIX Indicators

https://stix2-patterns.readthedocs.io/

BSD 3-Clause "New" or "Revised" License

26 stars 23 forks source link

Closed clenk closed 5 years ago

clenk commented 5 years ago

[file:hashes.'SHA-256' = 'AA76D3AF03B44639148D190785EAB9720471FFC28C71468182B786ED0B0EB']

The above doesn't have 64 characters so it's not a valid SHA256 hash but it passes the validator.