Security Issue Found in US Gov CISA Tool?

Shop (advertisement): https://shop.liveoverflow.com/ While looking for an open source app using ApolloServer with GraphQL, we stumbled over RedEye from CISA. After reporting the issue we got a response from the developers. The Report: https://github.com/cisagov/RedEye/issues/55 → Twitch Subscription: https://www.twitch.tv/products/liveoverflow → per Video: https://www.patreon.com/join/liveoverflow → per Month: https://www.youtube.com/channel/UClcE-kVhqyiHCcjYwcpfj9w/join Chapters: 00:00 - Intro 00:23 - Research Question 01:33 - CodeQL Query 02:48 - Proof of Concept 03:17 - Impact of Issue 06:53 - Fix Recommendations 08:15 - Discussing Bug Bounty Culture 09:42 - Outlook Next Video: joern =[ 📄 Info. ]= Main Channel: https://youtube.com/LiveOverflowCTF Twitch: https://twitch.tv/LiveOverflow =[ 🐕 Social ]= → Twitter: https://twitter.com/LiveOverflow/ → Website: https://liveoverflow.com/ → Subreddit: https://www.reddit.com/r/LiveOverflow/ → Facebook: https://www.facebook.com/LiveOverflow/ =[ 📄 P.S. ]= #liveoverflow