Ziyue

Apache APISIX: Servlet-style normalization creates a route/upstream authorization mismatch

Apache APISIX: Batch response aggregation can exhaust worker memory

In Eclipse Theia since version 1.26.0, the backend /services/request-service RPC accepts an attacker-controlled URL from any client connected to the standard /services messaging endpoint, performs the HTTP request server-side, and returns the full respons