Vulnerabilities
High-Severity Flaw in Nginx-UI Allows Bypass of Security Controls Before 1.9.10
A logic error in the Nginx-UI configuration validator lets authenticated users inject dangerous directives, risking code execution on affected systems.
GitHub
Everything Patch Herald has reported about GitHub: 2 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
1,500 npm packages spared takeover as GitHub expires unvalidated publishing configs in 48 hours
A validation gap in npm’s automated publishing feature allowed attackers to hijack packages by reclaiming old GitHub repository names.