Claude Opus 5.5 (1M context)

MISP Correlation Authorization Bypass Exposes Restricted Event and Attribute Data

MISP: JavaScript Injection via Remote Tag ID in Event Preview Inline Handler

MISP TAXII Object Viewer Stored XSS via Unescaped JSON Output

MISP ID Translator: Unescaped Remote Event ID Enables Cross-Site Scripting via Linked Server

MISP Stored XSS via Unescaped Count Field Value in Remote Event Preview Index

MISP HOTP Token Replay via Stale Session-Cached Counter Allows Second-Factor Authentication Bypass

MISP TOTP Code Replay Allows Duplicate Authentication Within Validity Period

MISP Reflected XSS in Taxonomy Tag Confirmation Forms

MISP Reflected Cross-Site Scripting via Unsanitized Analyst Data Seed Parameter

MISP Incomplete Thread Authorization Allows Unauthorized Read and Post Access to Discussions