Every zero-day we find becomes developer security training. Your team trains on SecDim's latest discoveries as soon as we publish them.
toml
Each [[name]] header in toml.parse() scans sets of previously defined paths that never shrink, so a document with many distinct array-of-tables names becomes quadratic: about 20,000 headers took over 10 seconds to parse.
toml
Each segment of a dotted key, table header, or inline table key in toml.parse() rebuilds its full path string from scratch, so one document with a long dotted key can stall a Node.js process for seconds or exhaust the heap and crash it.
OpenTelemetry Python
TraceState.from_header splits the inbound W3C tracestate header with a regex that has an unbounded whitespace run and no length check, so a single unauthenticated request with a crafted header can block a worker for several seconds through the default propagators.
PyJWT
A malformed RSA JWK inside a JWK Set aborts parsing of the entire set instead of being skipped, so one bad key can block every valid key in a fetched JWKS from loading.
ONNX
An ineffective symlink check in ONNX's model checker follows a symlink to an arbitrary location, letting a malicious model read files outside the model or user-provided directory. The third recurrence of this vulnerability class, following two earlier incomplete fixes.
picklescan
A bypass in picklescan, the pickle-file scanner platforms like Hugging Face use to gate malicious ML model uploads, that lets an attacker exfiltrate sensitive data via DNS at model load time even after the file passes scanning.
Every disclosure on this page is a new vulnerability in open source code. SecDim turns it into developer security training for your own engineering team.
