From Custom Code to Mature Library: Why I Replaced My SSRF Protection with requests-hardened
Choosing a Mature Library Over Custom Security Code Last week I submitted a PR to pytorch/torchtitan adding SSRF protection to the image decoder URL…
Open Source
⚑ Report a ProblemLatest Open Source news from Tech News
All topics
AI
agents
ai
api
architecture
automation
backend
beginners
career
database
devchallenge
devops
discuss
javascript
linux
llm
machinelearning
mcp
opensource
performance
productivity
programming
python
react
security
showdev
testing
tutorial
typescript
webdev
CVE-2026-19304: Bypassing SSRF Guards with Parser Confusion
I found a security flaw in IBM's Langflow and CrewAI that lets attackers reach internal networks. I've been auditing AI agent frameworks. These tool…
CVE-2026-53561: Apache Hive HiveServer2 SAML Bearer Impersonation
Originally published at HOL CVE-2026-53561: Apache Hive HiveServer2 SAML Bearer Impersonation TL;DR: HiveServer2's SAML HTTP path accepted a forged…
"I Won't Call It a Vulnerability: How Carapace Chose Not to Overclaim an OSS Finding"
In a previous Japanese post, I wrote about why I built Carapace: a local-first security CLI for people outside the small circle of organizations tha…