Peter Ullrich

Missing authorization check on save-job event handler in oban_web

HTTP/3 redirect handler leaks Authorization and Cookie headers to cross-origin redirect target in hackney

WebSocket fragmented message reassembly unbounded in bandit

Unbounded range expansion in cron describe causes memory exhaustion in oban_web

Unauthenticated denial-of-service via BEAM atom table exhaustion in phoenix_storybook

Unbounded body accumulation in HTTP/3 response loop in hackney

SOCKS5 TLS upgrade ignores caller timeout in hackney

Infinite loop in Alt-Svc header parser in hackney

CRLF injection in cookie domain/path options in hackney

HTTP/1 chunked body reader ignores length cap in bandit