DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Set ENABLE_SIGNUP=false in Open WebUI and sign-up is still open? Check it in one line

Set ENABLE_SIGNUP=false in Open WebUI and sign-up is still open? Check it in one line

Comments
3 min read
The XRPL Overflow Bug: What Developers Can Learn From a Supply-Invariant Failure

The XRPL Overflow Bug: What Developers Can Learn From a Supply-Invariant Failure

Comments
6 min read
Scan the Diff Before You Request Agent Review

Scan the Diff Before You Request Agent Review

Comments
6 min read
Logrotate for Application Logs: Configure Rotation Without Losing Data

Logrotate for Application Logs: Configure Rotation Without Losing Data

Comments
5 min read
CVE-2026-96361 Risk Ranking: Applying the CERT-BUND Damage and Probability Scores

CVE-2026-96361 Risk Ranking: Applying the CERT-BUND Damage and Probability Scores

Comments
2 min read
Cross-Chain Bridge Risk Assessment: Curve DEX

Cross-Chain Bridge Risk Assessment: Curve DEX

Comments
7 min read
CVE-2026-40281 Explained: A Patch That Guarded "=" on One Side Only

CVE-2026-40281 Explained: A Patch That Guarded "=" on One Side Only

Comments
5 min read
GhostAction Returns: 772 Repos Hit in New GitHub Actions Wave

GhostAction Returns: 772 Repos Hit in New GitHub Actions Wave

1
Comments
7 min read
Masked Extracts or Local Draft Models: A Debate for Agent SQL Placement

Masked Extracts or Local Draft Models: A Debate for Agent SQL Placement

Comments
7 min read
Flowise is archived, and its six September advisories will never get an official fix. What self-hosters can do

Flowise is archived, and its six September advisories will never get an official fix. What self-hosters can do

Comments
4 min read
One-time secret sharing

One-time secret sharing

Comments
2 min read
Tailscale Exit Node Logic: Why Auto-Select Fails for Security and How to Fix It

Tailscale Exit Node Logic: Why Auto-Select Fails for Security and How to Fix It

Comments
10 min read
Workday Is Buying Identity for AI Agents. Let's Build a Tiny Access Grant in TypeScript.

Workday Is Buying Identity for AI Agents. Let's Build a Tiny Access Grant in TypeScript.

Comments 1
14 min read
Review an Agent PR That Fetches Model-Named Docs URLs

Review an Agent PR That Fetches Model-Named Docs URLs

Comments
7 min read
Governance Attack Surface Review: Curve DEX

Governance Attack Surface Review: Curve DEX

Comments
7 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.