DEV Community

Jonathan Santilli profile picture

Jonathan Santilli

Problem solver, or at least he tries. He has more than two decades of experience working with various tech companies.

Joined Joined on 
The one they fixed
pachilo profile

The one they fixed

#ai #programming #fastapi #appsec
Comments
4 min read
FastAPI escaped two values in its docs page and left three unescaped
pachilo profile

FastAPI escaped two values in its docs page and left three unescaped

#fastapi #ai #programming #appsec
Comments
6 min read
A FastAPI security guarantee that isn't true
pachilo profile

A FastAPI security guarantee that isn't true

#fastapi #ai #programming #appsec
Comments
6 min read
FastAPI accepts a response_model on streaming routes and silently ignores it
pachilo profile

FastAPI accepts a response_model on streaming routes and silently ignores it

#fastapi #ai #programming #appsec
Comments
5 min read
FastAPI prints the contents of Pydantic's Secret[T]
pachilo profile

FastAPI prints the contents of Pydantic's Secret[T]

#fastapi #ai #programming #appsec
Comments
6 min read
Five findings in FastAPI, and what happened when I reported them
pachilo profile

Five findings in FastAPI, and what happened when I reported them

#fastapi #ai #programming #appsec
Comments
4 min read
The AI Supply Chain Problem Is Real. It's also decades old.
pachilo profile

The AI Supply Chain Problem Is Real. It's also decades old.

#ai #llm #suplychainattack
Comments
6 min read
AI agents write 95% correct code. It's secure 55% of the time
pachilo profile

AI agents write 95% correct code. It's secure 55% of the time

#ai #agents #appsec
Comments
4 min read
We asked AI agents to fix real security bugs. This is what happened.
pachilo profile

We asked AI agents to fix real security bugs. This is what happened.

#ai #agents #appsec
Comments
24 min read
Execute First, Ask Never: A Vulnerability in snyk-agent-scan
pachilo profile

Execute First, Ask Never: A Vulnerability in snyk-agent-scan

#agents #ai #appsec #mcp
2
Comments
8 min read
How to Read Findings: Fast, Clear, Actionable
pachilo profile

How to Read Findings: Fast, Clear, Actionable

#devops #mcp #security #tutorial
Comments
2 min read
Awareness, Not Safety Net: Set Correct Expectations
pachilo profile

Awareness, Not Safety Net: Set Correct Expectations

#ai #codegate #appsec #agents
Comments
2 min read
Why CodeGate Exists: Inspect Before Trust
pachilo profile

Why CodeGate Exists: Inspect Before Trust

#codegate #ai #appsec #agents
Comments
3 min read
The Repository That Tracks Everything You Ask Claude: A Story About Header Injection in Claude Code
pachilo profile

The Repository That Tracks Everything You Ask Claude: A Story About Header Injection in Claude Code

#claudecode #anthropic #ai #devsec
Comments
7 min read
The Repository That Steals Your API Key: A Story About Environment Overrides in Claude Code
pachilo profile

The Repository That Steals Your API Key: A Story About Environment Overrides in Claude Code

#claudecode #ai #vulnerability #devsec
1
Comments
7 min read
Reading Outside the Lines: Symlink Escape in OpenCode's File API
pachilo profile

Reading Outside the Lines: Symlink Escape in OpenCode's File API

#opencode #ai #devsec #agents
Comments
5 min read
The Classic Bug: Command Injection in OpenCode's Server Mode
pachilo profile

The Classic Bug: Command Injection in OpenCode's Server Mode

#api #backend #cybersecurity #security
2
Comments
5 min read
The Silent Trigger: How Formatters Became Attack Vectors in OpenCode
pachilo profile

The Silent Trigger: How Formatters Became Attack Vectors in OpenCode

#opencode #ai #formatters #devsec
Comments
5 min read
When "Read This File" Means "Run This Code": LSP Configuration in OpenCode
pachilo profile

When "Read This File" Means "Run This Code": LSP Configuration in OpenCode

#opencode #ai #lsp #devsec
2
Comments
4 min read
The repository that runs code: A story about MCP Configuration in OpenCode
pachilo profile

The repository that runs code: A story about MCP Configuration in OpenCode

#ai #mcp #opencode #devsec
Comments 2
5 min read
The Hidden Dangers of Vibe Coding
pachilo profile

The Hidden Dangers of Vibe Coding

#vibecoding #ai #devsevops
5
Comments 1
7 min read
Leveraging Large Language Models for Cross-Component Vulnerability Detection
pachilo profile

Leveraging Large Language Models for Cross-Component Vulnerability Detection

#ai #llm #appsec
Comments
3 min read
SQL Injection: the vulnerability that refuses to die
pachilo profile

SQL Injection: the vulnerability that refuses to die

#appsec #coderemediation #sast #ai
Comments
4 min read
Access Control Security: Learning from Major Data Breaches
pachilo profile

Access Control Security: Learning from Major Data Breaches

#securityengineering #owasp #cybersecurity #appsec
Comments
5 min read
loading...