https://www.vincentschmalbach.com/cve-2026-109618-and-cve-2026-109619-what-you-should-do-now/
httpd(8):
header block "Content-Type" "*multipart*" 403 "multipart blocked"
relayd(8):
block request quick header "Content-Type" value pattern "[Mm][Uu][Ll][Tt][Ii][Pp][Aa][Rr][Tt]" label "multipart blocked"
@sizeofvoid
> I'm writing this while working on vroni.com, my AI coding tool for turning tasks into pull requests.
Oh that definitely makes this sound reliable