Omkhar Arasaratnam

Apache Traffic Server: Header-name length truncation enables header aliasing and request smuggling

Apache Traffic Server: Memory-safety errors in MIME and header parsing

Apache Traffic Server: Abusive HTTP/2 framing can exhaust resources and crash the server

Apache Traffic Server: Memory-safety and path-traversal errors in the Cripts framework

Apache Traffic Server: HTTP/2 to HTTP/1 conversion forwards origin trailers to clients unsafely

Apache Traffic Server: Regex mappings match with malicious domain names

Apache Traffic Server: HTTP/2 multiplexed origin sessions are reused without certificate re-verification