Blog

A plugin for composing auth rules with AND and OR. The expression it evaluated wasn't always the one you wrote.

eta compiles templates with new Function. Three of its config options get spliced into that generated source raw — and two sibling engines already got a CVE for exactly this.

A type-safe query builder that escapes every value you give it — and then hands your column aliases to Postgres raw, quotes and all.

The 'safe' bulk-insert helper built a CREATE TABLE from your column names. What if a column name contained a ] ?

promptfoo lets an assertion say javascript: and runs it. That's documented for your own config. It also does it for rows fetched from a shared Google Sheet.

Massive-js binds every value you filter on. But put a dot in the key and it stops binding — and starts building a string literal by hand.

LangChain added an SSRF guard after the last CVE. It checks for private IPs — but only after asking 'is this an IP?', and one way of writing 169.254.169.254 makes it answer no.

transformers.js checks whether your modelId is a valid Hugging Face repo id. When the answer is no, it doesn't reject you — it reads the path off your disk instead.

A Go query builder ships a helper literally called Quote(). Its whole job is to make an identifier safe. It wraps it in quotes and calls it a day.

In LlamaIndex.TS, if the path you hand a reader starts with http, it fetches it. Every reader. Because the fetch lives in the class they all inherit from.

Objection binds the column safely with ??. Then it takes the JSON path you asked for and staples it into a string literal by hand.

Apache Commons Configuration's security page promises it's built to process untrusted config files. Its XML reader resolves external entities by default. Feed it a DOCTYPE and i...

It fetches a URL and returns the body. It follows redirects. It validates nothing. The only safe thing about getSafe is the name.

The original package is unmaintained. The maintained fork copied it byte-for-byte — including the identifier quoting that never escaped anything.

The README says it twice, in bold: deny-overrides, deny always wins. Grant three fields, then deny all fields with a wildcard, and all three come right back.

A read-only role granted *:read also gets *:read:write, *:read:admin, and *:readsecrets. The whole bug is one absent regex anchor — and the function right above it has it.

How a missing `--` turned a video-downloader wrapper into an argument-injection bug — and how the maintainer fixed it in an afternoon.

acl2 denies access to a resource with no grants — by compiling every granted resource name into a regex and testing it against the one you asked for. Name a resource '.*' and yo...

Two policies match your request. One hides the SSN field, one doesn't. abacl intersects the denies instead of unioning them — so the field one policy tried to hide comes back.

The obvious way to write an auth check is to return true or false. In oas-tools, only throwing denies the request. Returning false does nothing at all.