Kai Ole Hartwig

Blog

Security analyses, DevSecOps, TYPO3 & Kubernetes — and, in between, personal notes from life as a caregiving father. Posts in the “Personal” category are exactly that.

Blog

All posts
16.07.2026
Code as an OCI artifact (ORAS)
→16.07.2026
TYPO3 CVE-2026-15305 (Form Framework Upload)
→16.07.2026
AsyncAPI npm compromise (Miasma)
→15.07.2026
fileadmin on S3: three cache layers
→15.07.2026
GhostApproval: symlink flaw lets AI coding agents write outside the sandbox — six tools affected
→15.07.2026
Sylius Mollie Plugin: payment webhook forgery and order ID enumeration — fixed in 2.2.9 / 3.2.5 / 3.3.2
→14.07.2026
LiteLLM CVE-2026-42271 (RCE Chain)
→14.07.2026
Langflow CVE-2026-55255 (CISA KEV)
→14.07.2026
GhostLock CVE-2026-43499 (Kernel Futex UAF)
→14.07.2026
Gitea CVE-2026-20896 (Docker Auth Bypass)
→14.07.2026
jscrambler npm Supply-Chain Infostealer
→14.07.2026
Friendly Fire (AI Agent Auto-Review)
→