Vulnerability research, CVE write-ups and practical guides from the team building Gecko. Written for the engineers who have to fix the thing, not just triage it.
Authorization bypass vulnerability in AutoGPT’s external API allowing authenticated users to access execution results from other users’ graph executions.
Artemiy Malyshau
Arbitrary file copy vulnerability in Gradio’s flagging feature allows unauthenticated attackers to copy any readable file from the server’s filesystem.
Artemiy Malyshau
Authentication flow vulnerability in Ollama’s model pulling mechanism allowing cross-domain token redirection and theft.
Artemiy Malyshau
Showing 34 - 36 of 47 articles
Occasional updates and insights. No spam; unsubscribe anytime.