Peter Ullrich

HTTP Response Splitting via Non-VCHAR Bytes in cow_http_struct_hd:escape_string/2

XML injection in Saxy via unescaped CDATA section terminator

Processing instruction target and content emitted unescaped in Saxy encoder allows XML injection

XML comment injection in Saxy encoder via unescaped double hyphen

HTTP/2 request bodies made of 1-byte DATA frames amplify memory use in Bandit

erlang-jose RSA JWK parsing attempts to factor an attacker-controlled modulus, enabling CPU-exhaustion denial of service

Timing side-channel in pure-Erlang X25519 scalar multiplication leaks the private key in jose

ECDSA signature length is not validated in jose, allowing signature malleability

Weak PBKDF2 parameters for password-encrypted private-key export in jose

Infinite recursion (CPU denial-of-service) in JOSE.JWK.shared_secret/2 on mismatched key types