Company· 5 min read
How Cal.com Rebuilt AppSec After Going Closed Source
How Cal.com consolidated noisy security tooling into one continuous, context-aware pull request security program with Gecko.
Gecko Security
Resources
Research, guides and the root causes underneath
Vulnerability research, CVE write-ups and practical guides from the team building Gecko. Written for the engineers who have to fix the thing, not just triage it.
Latest articles
CVE· 3 min readn8n Cross-user Authorization Bypass in Dynamic Credential OAuth Endpoints
Authorization bypass in n8n’s dynamic-credentials OAuth endpoints allows any authenticated user to operate on another user’s OAuth credential by supplying its ID, enabling unauthorized OAuth rebinding and revocation.
Artemiy Malyshau
CVE· 2 min readCVE-2026-42227: n8n Public API Variables IDOR Allows Cross-Project Secret Disclosure
An IDOR vulnerability in n8n’s public variables API allows authenticated users to read project variables outside their authorized scope, exposing secrets across project boundaries.
Artemiy Malyshau
Show 3 more articles
Showing 1 - 3 of 47 articles
Stay connected with Gecko Security
Occasional updates and insights. No spam; unsubscribe anytime.