DEMO-2026-0001Critical · 9.6Sample Web Framework 4.x
Demo entry: unauthenticated deserialization in a fictional template engine.
Triage practice with a structured advisory stream: severity, affected technology, publication date and a plain-language explanation.
Demo entry: unauthenticated deserialization in a fictional template engine.
Demo entry: authorization bypass on a fictional admin route prefix.
Demo entry: stored cross-site scripting in a fictional comment renderer.
Demo entry: verbose error output exposing internal paths.
Demo entry: privilege escalation via a fictional mount handling flaw.
Demo entry: token replay in a fictional refresh flow.
Demo entry: insecure default ACL on newly created buckets.
Demo entry: missing rate limit on a fictional status endpoint.