Arusekk blog personal blog
Sourcehut account takeover via build logs (XSS in ansi2html)
A wormable vulnerability allowed anyone able to inject text in a build log on builds.sr.ht (or other instances) to take over accounts who viewed them
- Points
- 154
- HN comments
- 29
- Submissions
- 1
- Cited by
- 0 commenters
Security & PrivacySoftware Engineering2026
On Hacker News
| Submitted | Title on HN | Points | Comments |
|---|---|---|---|
| Sep 24, 2026 | Sourcehut account takeover via build logs (XSS in ansi2html) by arusekk | 154 | 29 |
