offset

capgo through 12.128.2 IDOR via PUT /app icon endpoint

h3 before 2.0.1-rc.18 Denial of Service via Unbounded Chunked Cookie

Capgo - Information Disclosure via Unauthenticated SSO check-domain Endpoint

Capgo - SQL Injection via Unvalidated limit Parameter in Admin Stats Endpoint

Capgo - Account Takeover via Cross-Domain SSO Email Assertion in provision-user

vm2 before 3.11.6 Process-wide State Exposure via os and dns

Flowise before 3.1.4 Denial of Service via text-to-speech/abort

h3 before 1.15.9 Path Traversal via Double Decoding

h3 before 1.15.9 SSE Event Injection via Carriage Return

h3 before 2.0.1-rc.18 Open Redirect via redirectBack()