node_id_hash(const node_t *node)
{
  return (unsigned) siphash24g(node->identity, DIGEST_LEN);
}

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.