Mercury: How a Missing Comma Led to Unauthenticated RCE

One of the things that inspired me to start this research was the RCE vulnerability in Marimo discovered this April. The speed at which things escalated there was remarkable: a missing validation chec