Vulnerability research, CVE write-ups and practical guides from the team building Gecko. Written for the engineers who have to fix the thing, not just triage it.
Authentication bypass in n8n’s StripeTrigger node allows unauthenticated attackers to forge arbitrary Stripe webhooks without knowing the signing secret.
Artemiy Malyshau
Path traversal vulnerability in n8n’s Webhook node allows attackers to write files to arbitrary locations on remote servers connected via SSH.
Artemiy Malyshau
The gap between tracking where data flows and reasoning about whether the logic is correct.
Jeevan “JJ” Jutla
Showing 28 - 30 of 47 articles
Occasional updates and insights. No spam; unsubscribe anytime.