Get the latest tech news

Sourcehut account takeover via build logs (XSS in ansi2html)

A wormable vulnerability allowed anyone able to inject text in a build log on builds.sr.ht (or other instances) to take over accounts who viewed them

None

Get the Android app

Or read this on Hacker News

Related news:

Blizzard confirms Diablo 5 won't gloss over Diablo's takeover of Sanctuary — 'It's not going to take place entirely off-screen'

DOGE Staffers Are Back—and Leading AI Takeover of Government Services

Diablo 5 senior game director says the game will tell 'three stories,' including the past, the present desolation of Diablo's takeover, and the future 'terror forming' of Sanctuary

« Motorola's Signature 27 will be the first non-Pixel phone to support GrapheneOS

New Map Reveals Where This ‘Super’ El Niño Will Hit Hardest, and It’s Not Pretty »