Peter Ullrich

html_sanitize_ex HTML5 scrubber keeps attacker-supplied meta refresh, allowing forced cross-origin redirection

CSS sanitizer allowlist bypass in html_sanitize_ex via non-declaration input

Quadratic regex backtracking in the html_sanitize_ex CSS scrubber allows CPU-exhaustion denial of service

Quadratic sibling re-flattening in the html_sanitize_ex traversal engine allows CPU-exhaustion denial of service

Cookie Request Header Injection via Unvalidated Encoder in cow_cookie:cookie/1

Atom Exhaustion via _entities Representation Keys in DivvyPayHQ absinthe_federation

Guardian.revoke/3 acts on unverified token claims, allowing forged-token session revocation

Atom-table exhaustion denial of service in Guardian via unbounded atom creation from binary keys

Atom-table exhaustion denial of service in Guardian permissions AtomEncoding via unbounded atom creation

guardian atom exhaustion in Guardian.Permissions.encode_permissions!/1