OliveTin: JWT Audience Validation Bypass in Local Key and HMAC Modes

OliveTin's unsafe parsing of UniqueTrackingId can be used to write files

OliveTin: Unauthenticated DoS via OAuth2 State Memory Exhaustion (Unbounded Map Growth)

OliveTin has a Concurrent Template Parsing Race Condition which Leads to Cross-Request Command Contamination

OliveTin: Unauthenticated Action Termination via KillAction When Guests Must Login

OliveTin: Unauthenticated DoS via concurrent map writes in OAuth2 state handling

OliveTin: Unauthenticated Denial of Service via Memory Exhaustion in PasswordHash API Endpoint