Eurico Nicacio

Privilege escalation in downstream clusters via GlobalRole inheritedNamespacedRules

SSRF allowlist bypass via percent-encoded bracketed IPv6 or trailing-dot IP literal in hackney

Missing authorization in the unit resources download route in Juju controllers

Unvalidated HTTP/1 request-target authority lets a client choose conn.host and conn.port in Bandit

TYPO3 CMS - Security Misconfiguration in Form Framework

Unvalidated chunk-size line tail in Mint HTTP/1 client enables response smuggling against strict intermediaries on pooled connections

Open redirect in Phoenix.LiveView.validate_local_url!/2 via ASCII tab, LF and CR