A requirement for staying sane while working in public as an open source maintainer is realizing that every issue, PR, and piece of feedback is a present, not an obligation. You can accept it, ignore it, and use it partially … Read more
A vulnerability affects certain React packages1 for versions 19.0.0, 19.1.0, 19.1.1, and 19.2.0 and frameworks that use the affected packages, including Next.js 15.x and 16.x using the App Router. The issue is tracked upstream as CVE-2025-55182. Fixed in:React: 19.0.1, 19.1.2, … Read more
In qBittorrent, the DownloadManager class has ignored every SSL certificate validation error that has ever happened, on every platform, for 14 years and 6 months since April 6 2010 with commit 9824d86. The default behaviour changed to verifying on October … Read more
{{ message }} This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository. You can’t perform that action at this time.
Paper 2023/331 A Vulnerability in Implementations of SHA-3, SHAKE, EdDSA, and Other NIST-Approved Algorithm Nicky Mouha, Strativia, Largo, MD, USA Christopher Celi, National Institute of Standards and Technology, Gaithersburg, MD, USA Abstract This paper describes a vulnerability in several implementations … Read more
{{ message }} This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository. You can’t perform that action at this time. You signed in with another tab or window. … Read more
Julie Qiu, for the Go security team6 September 2022 We are excited to announce Go’s new support for vulnerability management, our first step towards helping Go developers learn about known vulnerabilities that may affect them. This post provides an overview … Read more
CVE-2021-44832 Detail Awaiting Analysis This vulnerability is currently awaiting analysis. Description Apache Log4j2 versions 2.0-beta7 through 2.17.0 (excluding security fix releases 2.3.2 and 2.12.4) are vulnerable to a remote code execution (RCE) attack where an attacker with permission to modify … Read more
News broke early Friday morning of a serious 0-day Remote Code Execution exploit in log4j – CVE-2021-44228– the most popular java logging framework used by Java software far and wide. This type of vulnerability is especially dangerous as it can … Read more
Published 05/13/2021 In this article we introduce a scheme flooding vulnerability, explain how the exploit works across four major desktop browsers and show why it’s a threat to anonymous browsing. DISCLAIMER: FingerprintJS does not use this vulnerability in our products … Read more