Hacker Newsnew | past | comments | ask | show | jobs | submit | fromlogin
1.Brotli vulnerability affects curl and Git (github.com/advisories)
3 points by bmitch3020 1 hour ago | past | 1 comment
2.Vitest Dev Server Secret Leak (CVE-2026-112948) (github.com/advisories)
2 points by mumairrana007 1 day ago | past | discuss
3.Certifi bundles emSign root CAs with compromised intermediate CA keys (github.com/advisories)
3 points by codingjoe 2 days ago | past | 1 comment
4.CVE-2026-63277 โ€“ LibreOffice Remote Code Execution (github.com/advisories)
1 point by mritzmann 16 days ago | past
5.CVE-2026-55200: libssh2 memory corruption with possible RCE (github.com/advisories)
4 points by wildylion 3 months ago | past | 1 comment
6.Claude Code CVE-2026-39861:sandbox escape via symlink (github.com/advisories)
51 points by Armor1AI 5 months ago | past | 9 comments
7.Axios request smuggling via prototype pollution โ€“ Critical (CVSS 9.9) (github.com/advisories)
3 points by akhs 6 months ago | past | 1 comment
8.Vite Vulnerable to Arbitrary File Read via Vite Dev Server WebSocket (github.com/advisories)
2 points by lukax 6 months ago | past | 1 comment
9.React Router has XSS Vulnerability ยท CVE-2025-59057 (github.com/advisories)
2 points by maxloh 9 months ago | past
10.Malware in Ngx-Bootstrap (github.com/advisories)
3 points by lambdaone on Sept 15, 2025 | past | 1 comment
11.Malware in Debug (npm) (github.com/advisories)
3 points by duggan on Sept 8, 2025 | past | 1 comment
12.Malware in Stylus (github.com/advisories)
2 points by veidr on July 23, 2025 | past | 3 comments
13.browserify/pbkdf2 returns predictable uninitialized/zero-filled memory (github.com/advisories)
3 points by wslh on June 24, 2025 | past | 1 comment
14.Cloudflare/workers-OAuth-provider missing validation of redirect_URI (github.com/advisories)
5 points by notachatbot123 on June 3, 2025 | past | 1 comment
15.Authorization Bypass in Next.js Middleware (github.com/advisories)
25 points by nilsbunger on March 22, 2025 | past | 2 comments
16.Axios Requests Vulnerable to Possible SSRF (github.com/advisories)
1 point by andrewfromx on March 11, 2025 | past
17.GitHub Actions Script Injection in ultralytics/actions (github.com/advisories)
1 point by bo0tzz on Dec 7, 2024 | past
18.ws Node WebSocket affected by DoS when handling a request with many HTTP headers (github.com/advisories)
1 point by wslh on June 24, 2024 | past
19.High Severity:Request smuggling leads to endpoint restriction bypass in Gunicorn (github.com/advisories)
2 points by bearsyankees on April 17, 2024 | past
20.GitHub Advisories Database (github.com/advisories)
1 point by max_ on Sept 15, 2023 | past
21.Malware in fsevents (github.com/advisories)
16 points by peanut-walrus on April 28, 2023 | past | 1 comment
22.Okta Auth0 JWT vulnerability CVE-2022-23529 (github.com/advisories)
7 points by KingOfCoders on Jan 11, 2023 | past | 2 comments
23.Improper handling of email input โ€“ GitHub advisory for next-auth (github.com/advisories)
1 point by moritzwarhier on July 6, 2022 | past
24. [dupe] Embedded Malicious Code in node-ipc (github.com/advisories)
139 points by planb on March 20, 2022 | past | 124 comments
25.GitHub Advisory Database (github.com/advisories)
1 point by based2 on Jan 13, 2022 | past
26.Infinite loop causing Denial of Service in colors (github.com/advisories)
2 points by 0xedb on Jan 10, 2022 | past
27.Embedded malware in RC (NPM package) (github.com/advisories)
140 points by hjek on Nov 5, 2021 | past | 114 comments
28.Embedded Malware in Coa (github.com/advisories)
137 points by StevePlea on Nov 5, 2021 | past | 83 comments
29. [dupe] Embedded malware in ua-parser-JS (NPM package) (github.com/advisories)
3 points by carbonboarder on Oct 25, 2021 | past | 1 comment
30.Embedded crypto miner in ua-parser-JS (github.com/advisories)
3 points by Fervicus on Oct 22, 2021 | past | 1 comment

Consider applying for YC's Winter 2027 batch! Applications are open till November 2.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: