ORM leaks, CSRF is alive, lockpicking lessons – ethical hacker news roundup

Roundup: Elttam's ORM leak research on Django and Prisma, Doyensec reviving CSRF via client-side path traversal, race-condition bugs, and ServiceNow exploit chains.