PT-2026-60304

Name of the Vulnerable Software and Affected Versions 9Router versions prior to 0.5.6 Description The Kiro API-key validation endpoint 'POST /api/oauth/kiro/api-key' builds an upstream URL using a user-controlled region value. An authenticated attacker can provide a crafted region to redirect the...