Rust crate owners targeted in video-call supply chain campaign Rust's security response working group and the crates.io team have warned that prominent Rust con...
Lucas Oliveira
Research
Unfixed Gogs flaw can turn pull requests into server-side RCE A newly disclosed Gogs bug matters because it blurs the line between "authenticated" and "practica...
Lucas Oliveira
Research
Critical protobuf.js flaw turns untrusted schemas into JavaScript code execution A newly disclosed protobuf.js issue deserves attention well beyond the JavaScri...
Lucas Oliveira
Research