<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Bugs on vnykmshr</title><link>https://blog.vnykmshr.com/writing/tags/bugs/</link><description>Recent content in Bugs on vnykmshr</description><generator>Hugo</generator><language>en</language><lastBuildDate>Fri, 27 Mar 2026 00:00:00 +0000</lastBuildDate><atom:link href="https://blog.vnykmshr.com/writing/tags/bugs/index.xml" rel="self" type="application/rss+xml"/><item><title>Bug 1465</title><link>https://blog.vnykmshr.com/writing/bug-1465/</link><pubDate>Fri, 27 Mar 2026 00:00:00 +0000</pubDate><guid>https://blog.vnykmshr.com/writing/bug-1465/</guid><description>&lt;p&gt;Three bugs walk into a triage queue.&lt;/p&gt;
&lt;p&gt;A stack overflow. Symlink loop in tarball parsing, unbounded recursion, process crashes. Build a PoC, trace the call chain, write the report.&lt;/p&gt;
&lt;p&gt;&amp;ldquo;Duplicate of #1465&amp;rdquo;&lt;/p&gt;
&lt;p&gt;Memory exhaustion. String replace in an expression engine, exponential allocation, no cost limit. Different repo, different CWE, different everything. PoC, trace, report.&lt;/p&gt;
&lt;p&gt;&amp;ldquo;Duplicate of #1465&amp;rdquo;&lt;/p&gt;
&lt;p&gt;SQL injection. Template parameter escaping that wraps but doesn&amp;rsquo;t escape. Different repo again. PoC, trace, report.&lt;/p&gt;</description></item></channel></rss>