Michael Gattozzi@mgattozzi.devThis, Node, now Java as well l? Jesus Christ what is this CVE speedrun week?P(aul) Frazee@pfrazee.comthehackernews.comCritical GitLab Flaw (CVSS 10.0) Could Allow Unauthenticated RCE Across 12 Years of ReleasesGitLab fixes CVE-2026-110264, a critical flaw that could allow unauthenticated code execution on self-managed versions dating back to 7.0.21/10/26, 10:55 pm·0 reposts·4 likes
Lucretiel@lucretiel.me6dSTOP STOP bsky.app/profile/xeia...Xe@xeiaso.netHTTP/3 compression bomb: foxio.io/blog/header-...foxio.ioHeader Accordions: QPACK amplification attacks against HTTP/3 servers - FoxIO | Cyber InnovationWe solve the world’s toughest cyber challenges—creating breakthrough technology and embedding it into the systems that run everything.11