1. IBM Security Fix: FastAPI Router Query Parameters Exposed to CRLF Injection, OAuth Flow Manipulation
A critical security fix has been deployed across IBM's internal application codebase, addressing a vulnerability where unvalidated router query parameters could be exploited for CRLF injection and OAuth flow manipulation. The security team identified that the application accepted user input containing URL-encoded chara...