Katriel Moses

tablib versions prior to 3.10.0 Stored XSS via HTML Export Dataset Title

kafka-python prior to 2.3.2 DoS via SCRAM Iteration Count in scram.py

kafka-python prior to 2.3.2 Denial of Service via Protocol Parser Frame Length

Dockhand < 1.0.40 Unauthenticated Webhook Trigger via Git Webhook Endpoints

Dockhand < 1.0.36 Open Redirect via OIDC Initiation Endpoint

Rsbuild < 2.0.9 Command Injection via openBrowser() URL Handling

WebP Server Go < 0.15.0 Path Traversal via Backslash Encoding on Windows

Insecure PRNG and Information Exposure in urwid Web Display Backend

Nango < 0.71.6 Missing Authentication RCE via runner tRPC server

ZeroBrew version 0.3.1 and prior Missing Checksum Verification RCE via shim.rb