Search results

Media endpoint has no path sanitization - authenticated arbitrary file read from GitHub repos

Status: Open.

#396 In avitorio/outstatic;

· leanworld7-netizen opened on Jul 31, 2026

Logout CSRF: signout endpoint uses GET with no CSRF protection

Status: Open.

#395 In avitorio/outstatic;

· leanworld7-netizen opened on Jul 31, 2026

Missing OAuth state parameter enables login CSRF in GitHub OAuth flow

Status: Open.

#392 In avitorio/outstatic;

· leanworld7-netizen opened on Jul 31, 2026