Astra Security
2026
- CVE-2021-43798: Unauthenticated Path Traversal in Grafana's Plugin Static Resource Route
- CVE-2026-13448: Unauthenticated Remote Code Execution in Langflow OSS via Public-Flow Blacklist Bypass
2025
- Next.js Middleware Authorization Bypass
2024
- XZ Utils Supply-Chain Backdoor Review
2021
- Log4Shell Attack Surface and Long-Term Remediation