Jonatan Männchen / EEF

Path traversal in imported file_entries name allows arbitrary file write via URL-type entry download

Oidcc.Plug.AuthorizationCallback accepts callbacks with no authorize session or no state parameter, defeating CSRF protection

Oidcc.Plug.Authorize user agent session binding inert due to case-sensitive header lookup

Reflected XSS in oaskit's default HTML error handler

Guardian.revoke/3 acts on unverified token claims, allowing forged-token session revocation

Atom-table exhaustion denial of service in Guardian via unbounded atom creation from binary keys

Atom-table exhaustion denial of service in Guardian permissions AtomEncoding via unbounded atom creation

guardian atom exhaustion in Guardian.Permissions.encode_permissions!/1

YAML injection via unescaped newlines in ymlr document comments

Boruta accepts expired JWT client assertions due to missing exp claim validation