I found a Content-Type spoofing vulnerability in the image upload functionality of parisneo/lollms (CVE-2026-5728).

https://aydinnyunus.github.io/about/

#security #websecurity #infosec #appsec #cve #python #bugbounty