rust

Slipping an extra request through Cloudflare Pingora on a close-delimited body

Pingora could not recognise a comma-separated Transfer-Encoding, so it read the request body until the socket closed.

found by Rajat Raghav (xclow3n)

Pointing Cargo's .cargo-ok write at a file outside the crate directory

Cargo wrote "ok" into a marker file after unpacking a crate, and the crate got to decide what that marker was.

found by Ori Hollander, JFrog Security Research