3 casos · pág. 1/1
The curl project will handle low- and medium-severity vulnerability reports publicly on its GitHub repository from October 26, reserving private handling for high and critical flaws. Maintainer Daniel Stenberg attributes the change to an "avalanche" of vulnerability reports, largely AI-assisted, that has left key maintainers overloaded. T…
Researcher Mohan Pedhapati of Hacktron ran an AI-driven audit against vinext, Cloudflare's Next.js reimplementation reportedly built in a week with AI assistance. The scan produced 45 findings, of which 24 were manually validated, including several Critical issues. The most serious bugs allow cross-user session data leakage, shared cache …
On July 25, 2026, Hacktron researchers chained a heap buffer overflow in libheif (reached through ImageMagick in Discourse's image-upload pipeline) with an OpenAI SSO weakness. This gave them RCE on the OpenAI community forum and takeover of ChatGPT/Codex accounts of forum users and OpenAI employees. To prove impact without reading sensit…
