Highlights
DOM-Based XSS: 1 prior fix. Scrutinize any change in this area.
anytls-zig: most-fixed (1 issue). Treat as high-risk during review.
1 high-severity fix in this history; regressions here are high-impact.
Recurring patterns
DOM-Based XSS: The webtest latency rendering constructs DOM selectors from node identifiers without strict format validation, allowing injection of arbitrary HTML/JS into the page.
Denial of Service: Unbounded dynamic thread creation and lazy connection shutdowns allow memory exhaustion, crashing the router.
Last analyzed 31 Aug 2026, 06:02 UTC