Jonatan Kłosko

lazy_html serializes SVG and MathML style and script text unescaped, allowing mutation XSS

Livebook Teams identity check fails open when the deployment group is unresolvable, allowing unauthenticated access

Livebook Teams identity callback lacks state binding, allowing login CSRF

JS-view sandboxed output can synthesize keyboard events to trigger unconfirmed global shortcuts

Unescaped deployment environment variables in generated setup commands

Path traversal in imported file_entries name allows arbitrary file write via URL-type entry download