← All credits

https://github.com/2REBCat

1 vulnerability record and advisories credit this contributor.

CVE-2026-19863
An unauthenticated client may access certain protected resources when using EthereumAuthenticator if the request path contains the configured login path. This is caused by the authenticator using an unanchored substring match when identifying the login