NextJS Security Vulnerability(nextjs.org)

21 points by connor11528 10 months ago | 2 comments

When AI writes the software, who verifies it?(leodemoura.github.io)

271 points by todsacerdoti 7 months ago | 273 comments

Ripping off professional criminals by fermenting onions(shufflingbytes.com)

76 points by campuscodi 3 years ago | 50 comments

Okta's NextJS-0auth troubles(joshua.hu)

348 points by ramimac 11 months ago | 135 comments

Blog post by Joshua Rogers describing security issues he reported in Okta's auth0/nextjs-auth0 library, including an OAuth parameter injection, and the AI-slop handling of his fix.

Keycloak open redirect: wildcard redirect URIs can be exploited to steal tokens(securityblog.omegapoint.se)

91 points by pontushanssen 2 years ago | 12 comments

Supply Chain Vuln Compromised Core AWS GitHub Repos & Threatened the AWS Console(wiz.io)

123 points by uvuv 9 months ago | 27 comments