Jake Howard

Potential unencrypted email transmission via STARTTLS in the SMTP backend

Session fixation via public cached pages and SESSION_SAVE_EVERY_REQUEST

Potential denial-of-service vulnerability via repeated headers when using ASGI

Username enumeration through timing difference in mod_wsgi authentication handler