Warpgate: Reflected XSS in SSO return endpoint via attacker-controlled next parameter

Warpgate: Missing Admin Authorization on Live Recording Stream WebSocket Allows Any Authenticated User to Eavesdrop on Terminal Sessions

Warpgate: SSO CSRF -- State Token Not Validated on Return

Warpgate: Missing authorization check on `PUT /users/:id/roles/:role_id` allows any admin to bypass the `AccessRolesAssign` permission boundary

Warpgate: Web SSH stores a jump host's key against the target's address, so it validates as the target

Warpgate: x-warpgate-username Header Not Stripped from Client Requests Enables Identity Spoofing to WebSocket Backend Targets

Warpgate: API tokens bypass the user's allowed_ip_ranges restriction

Warpgate: Markup injection in SSO form_post return page via unencoded redirect/error values