What's in a tag name? JavaScript, apparently
2026-08-26T20:51:48Z•2265c97c90b75e501195ee66f7d7054715ded64b02d980b1fdce547767095d20
application-securityauthentication-bypasscache-poisoningcookie-securitycsp-bypasscss-injectionhttp-desynchronizationhttp-request-smugglingidorjwtparser-discrepancyphp-samlruby-samlsamlsecurity-researchssrftiming-attacktoken-forgeryunicode-overflowurl-validationwaf-bypassweb-securitywebsocketxss
What happened
PortSwigger Research feed aggregating recent web security research on parser discrepancies, authentication bypasses, HTTP request smuggling and desynchronization, CSS and JavaScript injection, cookie and WAF bypasses, cache poisoning, SSRF and URL validation bypasses, timing attacks, token forgery, CSP bypasses, and related offensive security techniques. Several entries describe potentially critical impacts including unauthenticated administrative access, credential or cookie theft, hostile takeover, and HTTP stream compromise. The feed is research-oriented and does not identify CVEs for the
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- portswigger_research
- Record identifier
- 2265c97c90b75e501195ee66f7d7054715ded64b02d980b1fdce547767095d20
- Enrichment time
- 2026-08-26T20:51:48Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.