| CVE | Project | Write-up |
|---|---|---|
| CVE-2026-105802 | Git LFS | How a line break got me code execution on your build server |
| CVE-2026-95106 | Gitea | How I got malware past code review |
| CVE-2025-61260 | OpenAI Codex CLI | Same design flaw, three different AI coding CLIs, one Critical CVE |
| CVE-2026-5917 | libgit2 | A poisoned Git link could run commands on your server, logged in as you |
| CVE-2026-89011 | isomorphic-git | Pollute one prototype, steal every Git token |
This is the source for izzysec.github.io, built with Jekyll and served by GitHub Pages. Posts live in _posts/.