PT-2025-42474

Name of the Vulnerable Software and Affected Versions FelixRiddle dev-jobs-handlebars version 1.0 Description The software uses absolute password-reset links that rely on the untrusted req.headers.host header and enforces the http:// scheme. This allows an attacker who can control the Host header...