Clinejection — Compromising Cline's Production Releases just by Prompting an Issue Triager | Adnan Khan - Security Research
To make sure it’s clear in the midst of the NPM package situation: I did NOT conduct overt testing on Cline’s repository. I conducted my PoC on a mirror of Cline to confirm the prompt injection vulnerability. A different actor found my PoC on my test repository and used it to directly attack Cline and obtain the publication credentials. The same actor used the credentials to publish an unauthorize
The Monsters in Your Build Cache - GitHub Actions Cache Poisoning | Adnan Khan - Security Research
Start typing to search posts... Search across titles, content, and tags Introduction UPDATE 01/23/25 - Some of the techniques in this blog post no longer apply, however the core technique is still valid: Cache poisoning allows workflow lateral movement. The big change is that you can no longer write to the cache after the workflow job finishes, these means you have to get creative by performing th
Launching BuildJet Cache for GitHub Actions
A reliable, faster and free alternative to GitHub Actions cache. We're thrilled to announce buildjet/cache, a reliable, fast, and free alternative to GitHub Actions cache. It is compatible with any runner - official, self-hosted, or BuildJet, and no matter the runner used, BuildJet doubles the free storage, providing 20 GB/repo/week storage space for free. Just like with GitHub Actions cache, when
1
リリース、障害情報などのサービスのお知らせ
最新の人気エントリーの配信
処理を実行中です
j次のブックマーク
k前のブックマーク
lあとで読む
eコメント一覧を開く
oページを開く
