← All credits

https://github.com/EQSTLab

2 vulnerability records and advisories credit this contributor.

An unauthenticated client may access certain protected resources when using EthereumAuthenticator if the request path contains the configured login path. This is caused by the authenticator using an unanchored substring match when identifying the login

Zip Bomb in Lookyloo Capture Upload Allows Denial of Service