Narnes and Bobles & Bobles and Narnes
Two type confusion bugs in a Bun bookstore: string price NaN trick, then batch INSERT column inference.
Web
Blogler
YAML anchor aliasing creates a shared reference that bypasses path validation via display_name mutation.
Zazastore
NaN comparison bypass in a Node.js shopping cart.
Travel Playlist
Path traversal via unsanitized file path parameter.
Pdfile
XXE injection with blacklist bypass via URL encoding.