Show HN: Xenia – A monospaced font built with a custom Python engine(github.com)

58 points by xeniafont 9 months ago | 20 comments

Show HN: CCState is a semantic, strict, and flexible state management library(github.com)

12 points by acmerfight 1 year ago | 1 comments

Show HN: Open-source CLI coding framework using Claude(github.com)

50 points by vysakh0 2 years ago | 14 comments

Wasm_of_OCaml(github.com)

114 points by eriangazag 3 years ago | 41 comments

CharlotteOS – An Experimental Modern Operating System(github.com)

156 points by ementally 11 months ago | 81 comments

Show HN: Anos – a hand-written ~100KiB microkernel for x86-64 and RISC-V(github.com)

94 points by noone_youknow 6 months ago | 25 comments

New Nginx Exploit(github.com)

427 points by hetsaraiya 5 months ago | 97 comments

GitHub repository containing a proof-of-concept exploit for Nginx vulnerability CVE-2026-42945, called Nginx-Rift.

GitHub is investigating unauthorized access to their internal repositories(twitter.com)

527 points by splenditer 5 months ago | 289 comments

A post on X from GitHub stating it is investigating unauthorized access to its internal repositories, with no current evidence of impact to customer data.

There isn't an easy exploit for this PHP vulnerability(eliastaylor.com)

566 points by zkldi 4 days ago | 437 comments

Blog post arguing a newly disclosed PHP vulnerability is hard to exploit and that thousands of LLM-generated GitHub PoC exploits don't work against vanilla PHP.

GitHub MCP exploited: Accessing private repositories via MCP(invariantlabs.ai)

477 points by andy99 1 year ago | 287 comments

Invariant Labs blog post describing a vulnerability in the official GitHub MCP server that lets attackers access private repository data via AI agent prompt injection.

GitHub RCE Vulnerability: CVE-2026-3854 Breakdown(wiz.io)

424 points by bo0tzz 6 months ago | 89 comments

Wiz Research blog post detailing CVE-2026-3854, a critical flaw in GitHub's internal git infrastructure enabling remote code execution on GitHub.com and GitHub Enterprise Server.

RCE Vulnerability in React and Next.js(github.com)

559 points by rayhaanj 10 months ago | 214 comments

GitHub security advisory GHSA-9qr9-h5gf-34mp for a critical (CVSS 10.0) remote code execution vulnerability in React Server Components affecting Next.js, with patched versions listed.