DEV Community

# vulnerabilities

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Flutter and Dart Dependency Security — Scanning pub.dev Packages for Vulnerabilities

Flutter and Dart Dependency Security — Scanning pub.dev Packages for Vulnerabilities

Comments
8 min read
One CVE, four ignore files: unifying Trivy, Grype, Snyk and osv-scanner

One CVE, four ignore files: unifying Trivy, Grype, Snyk and osv-scanner

Comments
4 min read
Windows and Linux Sensitive Directory Path Summary

Windows and Linux Sensitive Directory Path Summary

6
Comments
5 min read
One CVE, four ignore files: unifying Trivy, Grype, Snyk and osv-scanner

One CVE, four ignore files: unifying Trivy, Grype, Snyk and osv-scanner

Comments
4 min read
Architectural Collapse: How Extension Poisoning, Node Vulnerabilities, and Infrastructure Fog Enabled the GitHub Repository Breach

Architectural Collapse: How Extension Poisoning, Node Vulnerabilities, and Infrastructure Fog Enabled the GitHub Repository Breach

Comments
5 min read
Symlink races and a client-controlled auth header in OpenClaw

Symlink races and a client-controlled auth header in OpenClaw

Comments
1 min read
How to Audit Your AI Agent Skills for Credential Exposure and Malicious Instructions

How to Audit Your AI Agent Skills for Credential Exposure and Malicious Instructions

1
Comments 1
3 min read
What "Code That Runs Before You Click Trust" Means for AI Coding Tools (Claude Code Case Study)

What "Code That Runs Before You Click Trust" Means for AI Coding Tools (Claude Code Case Study)

Comments
4 min read
How to Check if You're Affected by CVE-2026-26268 in Cursor (and What to Do)

How to Check if You're Affected by CVE-2026-26268 in Cursor (and What to Do)

Comments
3 min read
How to Check If Your Claude Code Installation Is Affected by CVE-2026-39861 (CVSS 7.7)

How to Check If Your Claude Code Installation Is Affected by CVE-2026-39861 (CVSS 7.7)

Comments
3 min read
Why Fixed Container Image Versions Matter: Lessons from the Trivy Supply Chain Attack

Why Fixed Container Image Versions Matter: Lessons from the Trivy Supply Chain Attack

1
Comments
15 min read
Stop triaging Go CVEs that don't affect you

Stop triaging Go CVEs that don't affect you

Comments
1 min read
From LOW to CRITICAL: How a 5-Step Vulnerability Chain Goes Undetected by Flat Scanners

From LOW to CRITICAL: How a 5-Step Vulnerability Chain Goes Undetected by Flat Scanners

Comments
3 min read
How to Check Your MCP Server for CVE-2026-5603's Vulnerability Pattern (And Why shellQuote Isn't Enough)

How to Check Your MCP Server for CVE-2026-5603's Vulnerability Pattern (And Why shellQuote Isn't Enough)

Comments
3 min read
Learning Progress Pt.7

Learning Progress Pt.7

Comments
1 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.