Katriel Moses

Ground Station prior to 0.6.0 Unauthenticated Persistent Blind Server-Side Request Forgery via Orbital Data Source URL

OpenChamber 1.11.7 Unauthenticated DoS via /api/system/shutdown

Ground Station prior to 0.6.0 Unauthenticated DoS via service_control Socket.IO

OpenChamber 1.11.7 Path Traversal File Read via allowOutsideWorkspace Parameter

OpenChamber 1.11.7 Unauthenticated RCE via /api/fs/exec

SuperPlane < 0.30.0 SMTP Header Injection via Webhook Event Title

SuperPlane < 0.27.0 Broken Object Level Authorization via CanvasService gRPC

Milkdown < 7.21.3 DOM XSS via innerHTML Assignment

Milkdown < 7.21.3 Stored XSS via javascript: URL in link href

QueryWeaver Authentication Bypass via Email Signup Token Issuance for Existing Accounts