home.social

Search

10 results for “alula”

  1. europesays.com/it/742577/ GreenEdge Cycling, la ristrutturazione della proprietà alla base della mancata iscrizione della (fu) Jayco-AlUla: “Questioni tecniche, le risolveremo in fretta” #Ciclismo #Cycling #IT #Italia #Italy #Sport #Sports #TeamJaycoAlUla2026

  2. svg-sanitize rebuilds untrusted SVG as static vector graphics only. It does not simply search and replace script tags. It parses XML with defusedxml, checks resource limits, and constructs an entirely new XML tree from a small, explicit allowlist of elements, attributes, and valid values.

    Thanks to @wachizungu for the initial idea at the @hack_lu hackathon and also @therealsaumil to trigger me again about SVG at the 20th edition hack.lu ;-)

    It's a prototype and maybe utterly broken.

    🔗 github.com/adulau/svg-sanitize

  3. A great moment at @hack_lu with cybersecurity

  4. That's escalated quickly:

    • Chainguard Added as CVE Numbering Authority (CNA), September 22, 2026
    • PHP developers have accused software supply chain security shop Chainguard of effectively revealing critical bugs in the open-source scripting language ahead of a planned official disclosure.

    theregister.com/security/2026/

    I think the issue is not actually one or the other party but more the overall process. Can embargoed model for CVD sustainable when you need to notify many partners in large ecosystem? and expecting them to be ready at the exact same time?

    Maybe we should review the GCVE BCP-02 - "Practical Guide to Vulnerability Handling and Disclosure" gcve.eu/bcp/gcve-bcp-02/ to better describe what and when embargo is really required and how it's supposed to be handled?

    #cvd #gcve #cve #vulnerabilitydisclosure #cybersecurity

  5. I think it's time to write a blog post about how often vulnerability embargoes are completely useless.

    #cve #gcve #vulnerability #vulnerabilityManagement

Share on Mastodon

Enter the server where you have an account.