`Task.bind` leaks the inner task when the bind task is dropped while its function runs ### Prerequisites * [x] Check that your issue is not already filed: https://github.com/leanprover/lean4/issues * [x] Reduce the issue to a minimal, self-contained, reproducible test case. Avoid dependencies to Mathlib or Batteries.…
Security Vulnerability — Request for Private Disclosure Channel Hello, My name is Yousef Mohammed Alturki, and I am an independent security researcher. I have identified and successfully reproduced a potential security vulnerability affecting Gately v0.6.0.4. I have prepared a technical report, including source-code…
[Security] Remote Code Execution via eval() in petl.expr() Hello, I believe I have identified a security vulnerability and would like to report it through responsible disclosure. If the issue is confirmed, I would appreciate it if a CVE identifier could be requested and assigned after the vulnerability has been…
Missing security policy prevents a responsible disclosure in case a security vulnerability is discovered **Is your feature request related to a problem? Please describe.** There is no [security policy](https://github.com/graphql-rust/juniper/security/policy) set up for this project. Also, searching for `security` in…
[BOUNTY] 🔴 Red Team: x402 Payment Protocol Exploits (100 RTC) ## Red Team Bounty: x402 Payment Protocol Exploits **Reward: 100 RTC** (~$10 at reference rate) ### Target The x402/8004 HTTP Payment Protocol implementation merged in Rustchain PR #5 by @erdogan98. **Code location:** `x402/` directory in Rustchain repo…
🚨 Zero Day Pulse — Active Vulnerability Tracker # Zero Day Pulse > **Generated:** 2026-05-26 14:37 UTC | **Total:** 15 | 🔴 KEV: 0 | 🟠 Zero-Day: 13 | 🟡 High: 2 | ✨ Enriched: 10 --- ## 1. 🟠 Zero-Day — Ransomware Actors Exploit Unpatched SimpleHelp Remote Monitoring and Management to Compromise Utility Billing…
Responsible Vulnerability Disclosure: Stored XSS in IceCMS Dear IceCMS Team, We would like to responsibly disclose a stored cross-site scripting (XSS) vulnerability in IceCMS. In our local test, a registered subscriber (`role_id=1`) stored JavaScript through the resource creation API, and the script executed when the…
Responsible Vulnerability Disclosure: Nuxt Hydration DOM Clobbering in IceCMS Dear IceCMS Team, We would like to responsibly disclose a DOM Clobbering issue in the IceCMS Nuxt frontend. We verified that an attacker-controlled HTML element using the identifier `__NUXT_DATA__` can interfere with Nuxt initialization and…
[SECURITY] x402-express 1.2.0: Server-SR2 side-effect leak on failed settlement + :param route fail-open # Security Audit Report: x402-express 1.2.0 **Reporter:** Thomas Fulloon / bongs (Executive Brain) **Date:** 29 October 2026 **Target:** x402-express 1.2.0 (npm package) **Severity:** High (Server-SR2 violation) +…