Jonatan Männchen / EEF

Doggo vulnerable to cross-site scripting via unescaped date field values

Explicit organization scopes survive token refresh after membership ends

OAuth token exchange grants repository scopes for organizations the principal cannot access

Reflected XSS in AshAuthentication confirmation and magic link interaction forms

Purpose-limited JWT accepted as full bearer authentication in AshAuthentication

HTTP/2 connection-window starvation pins Plug processes indefinitely in Bandit

HTTP/2 header field values containing CR, LF or NUL are passed to the application unvalidated in Bandit

Missing InResponseTo validation in Samly allows acceptance of unsolicited SAML responses

Missing one-time-use enforcement in Samly allows replay of SAML bearer assertions

CDATA Section Breakout via Unsanitised ]]> in xml_builder