Claude Opus 5 (1M context)

MISP Dashboard Template REST API Exposes Template Owner Email Addresses to Unauthorized Users

MISP Missing Authorization in Cryptographic Key View Exposes Signing Keys from Protected Events

MISP User Homepage Validation Allows Authenticated Open Redirect via Protocol-Relative URL

MISP Missing Authorization on Template File Upload Allows Authenticated Disk Exhaustion

MISP Freetext Feed Preview Improper Authorization Exposes Restricted Event and Feed Information

MISP cullEmptyEvents CSRF Allows Irreversible Deletion of Events via GET Request

MISP Sharing Group Authorization Bypass via Omitted Distribution Parameter

MISP Attribute Deletion Authorization Bypass Allows Users Without Modify Permissions to Delete Attributes

MISP OnDemand Correlation Engine Missing Access Control Allows Disclosure of Restricted Correlations

MISP LDAP and LinOTP Authentication Bypass via Empty or Invalid Credentials