DOS
4 articles
BreakingCVE
One gzipped POST crashes Express via body-parser CVE-2026-111181. Upgrade to 1.20.9 or 2.4.0
How to fix CVE-2026-111181: upgrade body-parser to 1.20.9 or 2.4.0. Trailing bytes after a compressed request body crash the Node process before routing runs.
HOL Guard
BreakingCVE
NetScaler SAML memory overflow hits CISA KEV
How to fix CVE-2026-88779: upgrade NetScaler ADC/Gateway to 14.1-73.41 or 13.1-64.28 (SAML SP/IdP builds)
HOL Guard
BreakingCVE
OpenShift console Devfile API lets anyone SSRF your cluster
CVE-2026-75885 fixes are available for OpenShift 4.12, 4.17, 4.18, 4.19, 4.20, 4.21, and 4.22.
HOL Guard
CVEMulter
Aborted multer uploads still fill the disk after the 5038 fix
How to fix CVE-2026-88932: upgrade multer to 2.4.0
HOL GuardRelated topics
Keep exploring
The engineering desk continues across the ecosystem: security research on shipping agents safely, and plugins that put the standards to work.