Security Research

Vulnerabilities discovered by Gecko's Scanner.
Each finding was responsibly disclosed to the vendor.

Assigned CVEs

Disclosure Process

Vulnerabilities Fixed

Featured

Previously, there were entire classes of business logic and multi-step vulnerabilities that have long been invisible to SAST. Today, that changes.

Discoveries

Security vulnerabilities discovered and responsibly disclosed

Authorization bypass vulnerability in ONYX Enterprise Edition allowing curators to manipulate groups outside their authorized scope.