Supporting org.apache.xml.security in graalVM(guust.ysebie.be)

23 points by whizzx 1 year ago | 3 comments

How to report a security issue in an open source project(jacobian.org)

6 points by pabs3 1 year ago | 0 comments

We Fixed 2k+ Security Issues (2023)(sudhishkr.com)

4 points by mooreds 1 year ago | 0 comments

Malicious litellm_init.pth in litellm 1.82.8 PyPI package – credential stealer(github.com)

701 points by theanonymousone 7 months ago | 281 comments

GitHub issue in BerriAI/litellm reporting a malicious litellm_init.pth file in the 1.82.8 PyPI package that steals credentials via a supply chain compromise.

GPUHammer: Rowhammer attacks on GPU memories are practical(gpuhammer.com)

260 points by jonbaer 1 year ago | 89 comments

SQL Injection Isn't Dead: Smuggling Queries at the Protocol Level(simonwillison.net)

74 points by ulrischa 2 years ago | 19 comments