Vulnerability research, CVE write-ups and practical guides from the team building Gecko. Written for the engineers who have to fix the thing, not just triage it.
Authorization bypass vulnerability in ONYX Enterprise Edition allowing curators to manipulate groups outside their authorized scope.
Artemiy Malyshau
Local file inclusion vulnerability in Dagster’s gRPC server allowing arbitrary file reading through path traversal in notebook data endpoint.
Artemiy Malyshau
Remote code execution vulnerability in Letta’s tool execution endpoint through unsafe Python code execution in inadequate sandbox.
Artemiy Malyshau
Showing 37 - 39 of 47 articles
Occasional updates and insights. No spam; unsubscribe anytime.