-
openfga/openfga β Dynamic TLS cert rotation for HTTP gateway gRPC client
PR: openfga/openfga#2951
Enabled dynamic TLS certificate reloading for the HTTP gatewayβs internal gRPC client, preventing API failures during cert rotation and improving production reliability. -
keycloak/keycloak β Fix token_type_hint injection in TokenIntrospectionEndpoint
PR: keycloak/keycloak#46752
Eliminated reflected user input intoken_type_hinterror responses to prevent log injection and information leakage, hardening the token introspection API against malicious input. -
kyverno/kyverno β Deadlock prevention in
imageContext.Get
PR: kyverno/kyverno#15404
Prevented a read/write lock deadlock caused by an early return without releasingRLock, improving concurrency safety.