CVE-2026-63395: Critical Symlink Vulnerability in isomorphic-git
Discover CVE-2026-63395, a critical CVSS 8.8 vulnerability in isomorphic-git prior to 1.38.6 allowing arbitrary file writes via symlinks.
#javascript
Latest news about JavaScript: context, sources and what to do.
5 articles
Discover CVE-2026-63395, a critical CVSS 8.8 vulnerability in isomorphic-git prior to 1.38.6 allowing arbitrary file writes via symlinks.
Discover Ultra-Water, a viral GitHub repository featuring a real-time FFT ocean renderer for Three.js and WebGL2 with caustics and high frame rates.
Discover CVE-2026-44267, a critical 9.8 CVSS remote code execution vulnerability in Elo expression language prior to version 1.0.1.
Discover details about CVE-2026-120438, a high-severity heap buffer overflow in QuickJS-NG before 0.16.0 affecting 32-bit hosts. Learn mitigation steps.
Discover RuiC-PoseAtlas on GitHub, a zero-dependency static repository providing trilingual reference libraries for AI art, poses, costumes, and portraits.