Qqilnrnelinqilnrnel-test.hashnode.dev·Apr 26 · 1 min readHN-2026-002 PoC v2: updatePost coAuthor bypassDemonstrates unauthorized co-author attribution via updatePost — no team pub required.00
Qqilnrnelinqilnrnel-test.hashnode.dev·Apr 26 · 1 min readCross-pub publishDraft IDOR testTesting if publishDraft respects publication ownership00
Qqilnrnelinqilnrnel-test.hashnode.dev·Apr 26 · 1 min readHN-2026-002 PoC: Unauthorized Co-Author AttributionThis post demonstrates HN-2026-002. The co-author listed below (0SPwn) was attributed without their knowledge or consent using a single authenticated API call.00