CoreEvent GraphQL API β BOLA/IDOR exposing 10k+ records (PII, ticket QR codes) via unauthenticated queries /r/netsec - Information Security News & Discussion By: /u/Jipp2109 29 May 2026 at 00:42 submitted by /u/Jipp2109 [link] [comments]