Tag: vulnerability-research

All the articles with the tag "vulnerability-research".

• The Sandbox That Wasn't: Reversing CVE-2026-12537 in Gemini CLI

  24 Jul, 2026

  A CVE dropped against Gemini CLI with a 10.0 score and a two-line advisory that explained nothing. So I cloned the repo, read the patch backwards, and reconstructed how a .env file in a pull request turns into code execution on your CI runner — before the sandbox ever starts.

• Crashing Node.js with 40 Lines of JavaScript — A Memory Corruption Story

  24 May, 2026

  How I found a TOCTOU race condition in Node.js's native UTF-8 decoder that causes heap corruption via SharedArrayBuffer, built a working crash PoC, reported it to HackerOne — and watched it get closed as Informative.