From Custom Code to Mature Library: Why I Replaced My SSRF Protection with requests-hardened
Choosing a Mature Library Over Custom Security Code Last week I submitted a PR to pytorch/torchtitan adding SSRF protection to the image decoder URL…
Последние новости
⚑ Сообщить о проблемеTech news from the best sources
Все темы
AI
Gear
News
Tech
agents
ai
api
architecture
automation
beginners
career
database
devchallenge
devops
discuss
javascript
llm
machinelearning
mcp
opensource
performance
productivity
programming
python
security
showdev
testing
tutorial
typescript
webdev
CVE-2026-19304: Bypassing SSRF Guards with Parser Confusion
I found a security flaw in IBM's Langflow and CrewAI that lets attackers reach internal networks. I've been auditing AI agent frameworks. These tool…
CVE-2026-53561: Apache Hive HiveServer2 SAML Bearer Impersonation
Originally published at HOL CVE-2026-53561: Apache Hive HiveServer2 SAML Bearer Impersonation TL;DR: HiveServer2's SAML HTTP path accepted a forged…
"I Won't Call It a Vulnerability: How Carapace Chose Not to Overclaim an OSS Finding"
In a previous Japanese post, I wrote about why I built Carapace: a local-first security CLI for people outside the small circle of organizations tha…