HackerOne Disclosed Reports - 2025-09-09

Low
resolved

CVE-2025-9086: Out of bounds read for cookie path

Bug reported by Big Sleep was disclosed at September 10, 2025, 6:05 am   |   Buffer Over-read

Low
resolved

CVE-2025-10148: predictable WebSocket mask

Bug reported by Calvin Ruocco was disclosed at September 10, 2025, 6:05 am   |   Reusing a Nonce, Key Pair in Encryption