Pavan Nallamothu

Independent security researcher and penetration tester with 12 CVEs published through MITRE and credited by Apple, CISA, and the NSA, plus contributions to open-source projects including yt-dlp and AutoGPT. Coined EPI-SSRF (Egress-Path-Incomplete SSRF), a class of server-side request forgery affecting AI agent platforms. Author of two open-access papers on SSRF beyond HTTP and file-write attacks from untrusted archive and download metadata. M.S. in Cybersecurity, Pace University. Available to comment on vulnerability research, web application security, SSRF, AI agent security, and post-quantum cryptography.