development

2 articles

CVEweb securitysupply chainremediationdevelopment

CVE-2026-45618: Your Template Engine Runs Arbitrary Code. CVSS 10.

LiquidJS, a templating library with 7 million monthly downloads, lets attackers run any code on your server through a crafted template string. No login required. Public exploit available.

Jun 4, 2026

AIvibe codingweb securitydevelopment

Vibe Coding Is a Security Disaster and Nobody Cares

380,000 AI-built apps deployed with zero security review. 45% of AI-generated code has OWASP Top 10 vulnerabilities. An AI social network leaked its entire database in 3 days. But sure, ship it.

May 25, 2026