Hono · 2026
CVSS 4.7 Medium
Reported an XSS in hono/jsx server-side rendering, credited on CVE-2026-93981 and fixed in 4.13.7.
latest article
SEP 27, 2026
Squeezing 2.33 GiB of Phigros charts into 46 MB, losslessly
phigros.tools plays every Phigros chart in the browser. The charts weighed 2.33 GiB. Here's the codec that got them to 46 MB without losing a single bit.
compressionreverse-engineeringphigrosproject
Read article ->
recent writing
view all posts -> JUN 07 2026 TBSO raised €8.0m to build an AI/fintech platform that doesn't exist yet finance MAY 10 2026 Why the fuck did I write a Rust crate? rust APR 29 2026 Mogador: 13 million files through one workstation scraping MAR 04 2026 Belfast: I quit a game by writing its server reverse-engineering JAN 19 2026 One isNotNull() crashed ClickHouse, and the fix was 5 lines clickhouse
work & disclosures
view all disclosures ->Fédération Française d'Athlétisme · 2026
CVSS 5.9 Medium
Reported weak cryptographic practices and non-robust implementations.
libsoup · 2026
CVSS 6.9 Medium
Reported a memory corruption issue in the HTTP client/server library.
Iliad / Freebox OS · 2026
CVSS 8.7 High
Reported two vulnerabilities affecting Freebox OS, enabling one-click account takeover.
Santé Publique France · 2026
CVSS 8.7 High
Reported an IDOR exposing personally identifiable data for roughly 250 EUR in bounty.
pdfcpu · 2025
CVSS 8.2 High
Reported a stack overflow leading to denial of service.