shirabe0x05

undici vulnerable to cross-user information disclosure via cross-origin redirect revalidation

undici vulnerable to cross-origin credential disclosure via array-of-tuples headers bypassing redirect stripping

Grav 2.0.0 before 2.2.5 Unauthorized Page Deletion via Flex Form Directives

Grav Login plugin 3.6.0 before 3.9.13 Privilege Escalation via login.invite

Grav Flex Objects 1.4.0 before 1.4.17 Authorization Bypass via Pages API Routes