📦 Bokeh

This vulnerability allows attackers to bypass Bokeh server allowlist protections via domain suffix matching. Attackers can register malicious domains that end with allowed domain names (e.g., dashboar...