Fix Challenge 8 voting VERB-tampering flag leak (Challenge-81) - #494

Closed

beanbeah wants to merge 3 commits into

OWASP-CTF:dc34-ctffrom

beanbeah:ctf/r2-challenge-challenge-81-jwt-voting-challenge

Commits on Aug 9, 2026

Fix VERB-based access control bypass in Challenge 8 voting endpoint

beanbeah
and
claude
committed
aa086e6
ci: bump lombok to 1.18.46 to unblock JDK 25 scoring build

beanbeah
and
claude
committed
4ad4734
chore: retrigger CI scoring (previous run's leaderboard POST returned 500)

beanbeah
and
claude
committed
211c6bd