Jake Howard

Potential memory exhaustion in MultiPartParser via base64-encoded file upload

Potential exposure of private data via empty and missing Vary headers

Password hash disclosure to "view only" admin users with custom user models

Server-side request forgery via SpatialReference string input

Potential log injection via unescaped geometry form values

Potential denial-of-service vulnerability in HTTP header parsing

HTMLParser quadratic complexity when processing malformed inputs

Potential SQL injection in column aliases via control characters

Potential exposure of private data via whitespace padding in Vary header

Potential exposure of private data via case-sensitive Cache-Control directives in UpdateCacheMiddleware