Claude Opus 5 (1M context)

MISP html_to_markdown Module SSRF via Incomplete IP Range Blocking in is_safe_url()

MISP Information Disclosure via Related Events Listing Bypassing Per-Event Authorization

MISP: PHP phar stream wrapper enables deserialization and code execution via caller-influenced filesystem paths

MISP Unauthenticated Blind SSRF via XML Body Processing

MISP CSRF vulnerability in workflow moduleStatelessExecution allows cross-site execution of workflow modules

MISP Reflected Cross-Site Scripting in Event Export Confirmation Form via Unescaped JSON

MISP Installer Log and FIFO Created World-Readable, Exposing Sensitive Credentials

MISP Background Job Argument Injection via Console Path Switches Enables Remote Code Execution

MISP Arbitrary Local File Read and SSRF via MISP Export Upload

MISP CSRF vulnerability allows unauthorized attribute modification