CVE-2024-29041: Express remediation · Subscription service

Malformed return URLs pass validation but produce a different encoded Location target. Confirm the exposure, contain the affected workload, and validate a patched rollout.

Jamie Engineering lead · 02:13 a.m.

Subscription service / ap-southeast. Investigate express, restore service, and verify the result.