1
When URL parsers disagree
Discovery and walkthrough of CVE-2023-38633 in librsvg, when two URL parser implementations (Rust and Glib) disagree on file scheme parsing leading to path traversal.
Build apps and integrations with Canva
Visit canva.dev → On Hacker News Jun 2023 – Mar 2024
Software Engineering 4Infrastructure & DevOps 2Web & Frontend 1Security & Privacy 1Career & Management 1Tech Industry & Business 1
Discovery and walkthrough of CVE-2023-38633 in librsvg, when two URL parser implementations (Rust and Glib) disagree on file scheme parsing leading to path traversal.