PT-2026-98562

Name of the Vulnerable Software and Affected Versions Rojo affected versions not specified Description The rojo serve command starts an unauthenticated HTTP API on localhost default port 34872 that lacks Host or Origin header validation. This allows an attacker to use DNS rebinding—a technique th...