Omkhar Arasaratnam

Apache Traffic Server: HTTP/2 and HTTP/3 dechunking removes per-stream buffer cap, allowing memory exhaustion

Apache Traffic Server: HPACK encoder desynchronizes from the decoder after a failed header encode

Apache Traffic Server: Plugins resetting the redirect counter enable SSRF amplification

Apache Traffic Server: Memory-safety and limit-bypass errors across experimental plugins

Apache Traffic Server: Multiplexer plugin chunk decoder enables a denial of service

Apache Traffic Server: webp_transform plugin decodes unsafely and mislabels degraded responses

Apache Traffic Server: Use-after-free in the intercept plugin

Apache Traffic Server: header_rewrite plugin cookie handling can corrupt memory

Apache Traffic Server: prefetch plugin can crash on attacker-influenced input

Apache Traffic Server: ts_lua plugin has initialization and resource-handling errors