Assetnote researchers disclose XSS chain in Cloudflare's image endpoint

The chain combined an SVG sanitizer bypass, Chromium cache behavior and a Cloudflare Access redirect; Assetnote says it reported the issue and Cloudflare fixed it.

RuntimeWire · 2026-10-28T15:32:33.959Z