SourceHut account takeover via build logs (XSS in ansi2html.py) | CVE-2026-92973
- Welcome to my first big impact vulnerability writeup!
- I like good stories, so let me describe some background first.
- I recently had a ‘great’ idea (I know, I know, I should stop having these) to set up a sr.ht instance that would pay people for hosting their projects.
Unverified
- Welcome to my first big impact vulnerability writeup!
- I like good stories, so let me describe some background first.
- I recently had a ‘great’ idea (I know, I know, I should stop having these) to set up a sr.ht instance that would pay people for hosting their projects.
Sources: Arusekk