Komari (< 0.0.0-20260609084633-98122fa4d110)

The Komari management interface lacks CSRF protections and secure cookie attributes, allowing an attacker to perform unauthorized administrative actions including arbitrary code execution.