News

Sourcehut account takeover via build logs (XSS in ansi2html)

  • Arusekk--Arusekk.pl
  • published date: 2026-09-24 19:54:21 UTC

A wormable vulnerability allowed anyone able to inject text in a build log on builds.sr.ht (or other instances) to take over accounts who viewed them

Continue Reading at Arusekk.pl →