PT-2026-59356

Summary The ydoc:document:join Socket.IO handler checks note ownership only when the document id starts with note: colon. However, the YdocManager storage layer normalizes all document IDs by replacing colons with underscores document id.replace":", " ". An attacker can join a document room using...

EUVD-2020-4166

Malware in sbrugna...