From Custom Code to Mature Library: Why I Replaced My SSRF Protection with requests-hardened
Choosing a Mature Library Over Custom Security Code Last week I submitted a PR to pytorch/torchtitan adding SSRF protection to the image decoder URL…
AI & ML
⚑ Report a ProblemLatest AI & ML news from Tech News
All topics
AI
News
Tech
agents
ai
api
architecture
automation
backend
beginners
career
claude
database
devchallenge
devops
javascript
llm
machinelearning
mcp
opensource
productivity
programming
python
react
security
showdev
testing
tutorial
typescript
webdev
CVE-2026-19304: Bypassing SSRF Guards with Parser Confusion
I found a security flaw in IBM's Langflow and CrewAI that lets attackers reach internal networks. I've been auditing AI agent frameworks. These tool…
CVE-2026-53561: Apache Hive HiveServer2 SAML Bearer Impersonation
Originally published at HOL CVE-2026-53561: Apache Hive HiveServer2 SAML Bearer Impersonation TL;DR: HiveServer2's SAML HTTP path accepted a forged…
"I Won't Call It a Vulnerability: How Carapace Chose Not to Overclaim an OSS Finding"
In a previous Japanese post, I wrote about why I built Carapace: a local-first security CLI for people outside the small circle of organizations tha…