← All credits

This issue was discovered by Chris Meyers (Red Hat).

13 vulnerability records and advisories credit this contributor.

Aap-gateway: missing requestheaderstoremove allows mtls bypass via subject header spoofing

Eda-server: externaleventstreamviewset trusts subject header without validation and leaks expected dn

Galaxy_ng: shell injection in legacy role import via unsanitized git ref names