CVE-2026-67345: Insecure Host Domain Endswithcve-2026-67345-insecure-host-domain-endswith
Matching domains or hostnames using `String.endsWith()` without a dot boundary allows attackers to bypass validation by registering a domain that has the target domain as a suffix (e.g., `evil-example.com` will match `example.com`). Require a dot-prefixed match, or use an exact match (`equals`).
