Tag: devsecops

All the articles with the tag "devsecops".

• The Sandbox That Wasn't: Reversing CVE-2026-12537 in Gemini CLI

  24 Jul, 2026

  A CVE dropped against Gemini CLI with a 10.0 score and a two-line advisory that explained nothing. So I cloned the repo, read the patch backwards, and reconstructed how a .env file in a pull request turns into code execution on your CI runner — before the sandbox ever starts.