Jonatan Männchen / EEF

SFTP READLINK Leaks Absolute Backend Filesystem Path When Root Is Configured

Improper Verification of Cryptographic Signature in dashbit nimble_zta Cloudflare strategy

Refresh tokens accepted as private repository credentials at the CDN

Session voucher adding no new funds is accepted without a charge in mpp, serving paid resources for free

mpp Tempo subscription key authorization is not bound to the issuing challenge, allowing a captured activation credential to be replayed

Bypass and runtime policies that can never pass may be incorrectly applied in filter authorization

Authorization bypass when bypass policy condition evaluates to true

Before action hooks may execute in certain scenarios despite a request being forbidden

Missing Session Revocation on Logout in ash_authentication_phoenix

SSRF protection bypass in safeurl via IPv6 addresses and unresolvable hosts