Jonatan Männchen / EEF

Cross-site scripting in MDEx via unescaped highlight_lines_class code-fence attribute

Plug: quadratic-time decoding of nested query/body parameters enables denial of service

Stored XSS via unescaped HTML attribute values in earmark

OAuth2/OIDC account takeover in AshAuthentication via email-based user matching

Unauthenticated denial-of-service via BEAM atom table exhaustion in membrane_mp4_plugin

Decompression bomb DoS in Req via auto-decoded archive and compressed response bodies

Multipart form-data header injection in Req via unescaped name/filename/content_type

HTTP response smuggling in Mint HTTP/1 client via lenient Content-Length parsing

HTTP/2 CONTINUATION flood in Mint client via unbounded header-block accumulation

Unbounded conn.streams growth in Mint HTTP/2 client via unenforced PUSH_PROMISE concurrency