Category - API Security Blog

curl: Uncontrolled File Write/Arbitrary File Creation

Vulnerability description not...Read More ...

September 14, 2025

curl: Account/Repository Takeover via Abandoned GitHub Username in curl’s href_extractor.c

Vulnerability description not...Read More ...

September 14, 2025

8×8: █.8×8.vc/index.js: Exposed Google Maps API Key Allowing Potential Abuse of Paid Services

The Google Maps API key was inadvertently exposed in client-side code, allowing potential unauthorized access to some Google Maps services. The issue was promptly addressed by implementing appropriate ...

September 14, 2025

curl: ## Title Heap Use-After-Free Vulnerability in `curl` Leading to Potential Code Execution

Vulnerability description not...Read More ...

September 14, 2025

curl: Disk Space Exhaustion leading to a Denial of Service (DoS)

Vulnerability description not...Read More ...

September 14, 2025

Node.js: CWE-195 in ExternalMemoryAccounter::Increase()

Vulnerability description not...Read More ...

September 14, 2025

Khan Academy: 337k users and 1 employee leaked credentials

The Khan Academy website experienced a data breach, resulting in the leakage of 337.7k user accounts and one employee account. The leaked credentials, including email addresses and passwords, were dis ...

September 14, 2025

curl: WebSocket Fragmentation DoS on Curl Client

Vulnerability description not...Read More ...

September 14, 2025