| Protocol | description | link |
|---|---|---|
| fmt | Command injection in fmt::say() on macOS |
link |
| libgit2 | Command injection in ssh_exec | link |
| keepassxc | Missing check for duplicate group UUID causes crash | link |
| prometheus | tsdb: guard chunk length overflow in head chunk reader | link |
| prometheus | missing size caps to all important Snappy/OTLP remote read/write decoders | link |
| prometheus | iterating over histogram buckets can panic | link |
| prometheus | Missing histogram validation in remote-read and during reducing resolution | link |
| serialize | Buffer Overflow in Serialize Library | link |
| sliver | Pre-Auth Memory Exhaustion via NoEncoder Bypass | link |
| zephyr | memory‑safety issue in the DNS name parser | link |
| valkey | Remote DoS with malformed Valkey Cluster bus message | link |
| linux | OOB write in attr_wof_frame_info() | link |
| Filament | Heap buffer overflow (OOB write) in Filament gltfio meshopt decompression due to size_t overflow | Not published on Google's end yet |
| Filament | Heap buffer overflow (OOB write) in Filament gltfio Draco decode due to type mismatch | Not published on Google's end yet |
| Protocol | Protocol Type | Report |
|---|---|---|
| Espresso Systems | HotShot Consensus Protocol | Report |
| Espresso Systems | HotStuff Consensus Mechanism | Report |
| Espresso Systems | Consensus Rewards Mechanism | Report |
| Espresso Systems | Nitro Caffeinated Node | Report |
| Espresso Systems | Nitro Stateless Batcher V1 | Report |
| Espresso Systems | Fee Contract | Report |
| Espresso Systems | Espresso Sequencer | Report |
| Protocol | Protocol Type | Report |
|---|---|---|
| GMX | Derivatives | Reports |
| Abracadabra | CDP | Report |
| Poolshark | Dex | Reports |
| IVX | Options | Report |
| PariFi | Perpetuals | Report |
| Ambit | Lending | Report |
| Umami | Yield | Report |
| Protocol | Protocol Type | Report |
|---|---|---|
| Lexer Markets | Derivatives | Report |
| Ambit | Lending | Report |
| Ceden Network | ||
| Hyperstable |
- A Security Engineer's Guide to Getting Ready for an Audit!
- The Linux Boot Process: From Power Button to Kernel — [Featured on HN (peak rank 1)]
- A Friendly Tour of Process Memory on Linux — [Featured on HN (peak rank 3)]
- The Life of a Packet in the Linux kernel
- How CPU Caches Work
- CVE-2026-1678: DNS Parser Overflow in Zephyr
- How LLMs Actually Work — [Featured on HN (peak rank 1)]
If you want to talk security I can be reached @0xkato.