Story
Just the rumour of a bug is enough to find an exploit these days
1 report
1 website
1 discussion
Latest report
Overview
I released a security fix for OCaml's cohttp 6.3.0 today, fixing a path traversal issue. The patch itself was straightforward and in normal times, the security procedure would have been to fix it privately, inform affected users, and then issue a public advisory. This time around though, I noticed probes in my live webserver logs with the exact bug pattern just minutes after opening the PR to fix ...
Summary from anil.recoil.org.
Reports
One report so far. Additional coverage will appear here when it is linked to this story.
Community reactions
Each reaction summarizes sampled comments from the linked discussion.
Hacker News · anil.recoil.org
Hacker News discussion ↗
Historical count: 9 · 9 saved in sample · Historical sample
Awaiting analysis