DEV Community

#appsec

Application security topics beyond the web, including mobile and desktop applications.

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
GhostSplice Isn't a Jailbreak, It's a Reminder That LLMs Can't Do Access Control
coridev profile

GhostSplice Isn't a Jailbreak, It's a Reminder That LLMs Can't Do Access Control

#security #ai #llm #appsec
1
Comments
3 min read
FastAPI accepts a response_model on streaming routes and silently ignores it
pachilo profile

FastAPI accepts a response_model on streaming routes and silently ignores it

#fastapi #ai #programming #appsec
Comments
5 min read
A Sandbox Got Popped at Black Hat. Nobody Should Be Shocked.
coridev profile

A Sandbox Got Popped at Black Hat. Nobody Should Be Shocked.

#security #ai #llm #appsec
1
Comments
3 min read
The one they fixed
pachilo profile

The one they fixed

#ai #programming #fastapi #appsec
Comments
4 min read
FastAPI prints the contents of Pydantic's Secret[T]
pachilo profile

FastAPI prints the contents of Pydantic's Secret[T]

#fastapi #ai #programming #appsec
Comments
6 min read
Five findings in FastAPI, and what happened when I reported them
pachilo profile

Five findings in FastAPI, and what happened when I reported them

#fastapi #ai #programming #appsec
Comments
4 min read
Top Enterprise SCA Tools in 2026: A Developer's Comparison
alexcybersmith profile

Top Enterprise SCA Tools in 2026: A Developer's Comparison

#security #opensource #appsec #devops
Comments
11 min read
A CVSS 10.0 in Your AI Coding Agent Is Just TOCTOU Wearing a Hoodie
coridev profile

A CVSS 10.0 in Your AI Coding Agent Is Just TOCTOU Wearing a Hoodie

#security #ai #appsec #devops
1
Comments
3 min read
Why I Suppressed 30% of Snyk's Recommendations
pgmpofu profile

Why I Suppressed 30% of Snyk's Recommendations

#security #appsec #java #devsecops
Comments
8 min read
Adding WebAuthn to a multi-tenant NestJS + Next.js app: what nobody tells you
elwin_ernst profile

Adding WebAuthn to a multi-tenant NestJS + Next.js app: what nobody tells you

#appsec #webauthn #security #passkeys
Comments
11 min read
A text message that runs a command: OS command injection in Gammu SMSD (GHSA-9vjj-v46c-c5qf)
santosh_kumarpuppala_96e profile

A text message that runs a command: OS command injection in Gammu SMSD (GHSA-9vjj-v46c-c5qf)

#security #cve #linux #appsec
Comments 2
6 min read
They scoped the customer and forgot the customer's ledger — a High-severity cross-tenant BOLA in Open Food Network
santosh_kumarpuppala_96e profile

They scoped the customer and forgot the customer's ledger — a High-severity cross-tenant BOLA in Open Food Network

#security #cve #ruby #appsec
Comments
6 min read
Secure Code Review Challenge #2: Professional — Solution (Clean Code Can Still Be Vulnerable)
mohamed_aboelkheir profile

Secure Code Review Challenge #2: Professional — Solution (Clean Code Can Still Be Vulnerable)

#security #appsec #codereview #cybersecurity
Comments 2
11 min read
The npm Worm That Learned to Trust Your AI Agent
coridev profile
Cor E

The npm Worm That Learned to Trust Your AI Agent

#security #ai #devops #appsec
Comments
3 min read
Your AI Scam Detector Trusts Fake Reviewers More Than You Think
coridev profile
Cor E

Your AI Scam Detector Trusts Fake Reviewers More Than You Think

#security #ai #llm #appsec
1
Comments
3 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.