1
Sourcehut account takeover via build logs (XSS in ansi2html)
A wormable vulnerability allowed anyone able to inject text in a build log on builds.sr.ht (or other instances) to take over accounts who viewed them
Arusekk blog
- Popular posts
- 1
- Total points
- 154
- HN comments
- 29
- Rank
- #15,647 personal
Visit blog.arusekk.pl → RSS feedOn Hacker News Sep 2026 – Sep 2026