Jörmungandrk

icon indicating an email [email protected]

icon company Cybersecurity Engineer | Cyber-Physical Systems CPS™ @zsrscience | Cybersecurity Mentoring @zerofactorylabs icon location Lesser Sunda Islands. East of Javanesse icon location Security engineer passionate about kocheng silence. This is my personal account and any activities I perform are as an individual.👤

Results 20 comments of Jörmungandrk

chore: add prototype pollution guards to setState and SnapController

/cc @FrederikBolding

fix Use of `Kernel.open` or `IO.read` or similar sinks with a non-constant value Command Injection in RDoc

/cla

fix arbitrary file access during archive extraction ("Zip Slip")

hi @lostluck seems like i see `go test -v` passed

fix arbitrary file access during archive extraction ("Zip Slip")

hi there seems like `unit-test` has been added

Fix unsigned difference expression compared to zero

Hi @Fusl @lipzhu @ranshid, Thank you for the advisory update! Would it be possible to include my Github handle `github:username` for proper credit attribution in the advisories **https://github.com/advisories/GHSA-xhp4-6g9v-4xvj** Thank you...

Fix uncontrolled data used in path expression

Hi @warmshao @gregpr07, thank you for your response and for approving the patch. I was wondering if there are any updates regarding [algora.io/odaysec](https://algora.io/odaysec/profile), or if you might be open to...

Fix uncontrolled data used in path expression

/claim #619

fix Shell command built from environment values

ping @gingerbenw @AnastasiiaSvietlova let's `merged` this pull-request for `patch` the vulnerable. best regards

fix(ibc-hooks): safely construct JSON message using Go struct and json.Marshal

/cc @gjermundgaraba. I kindly request that you urgently consider merging this pull request at your earliest convenience.

fix tar extraction add path validation to prevent escape from destination

/ok-to-test