PHP warns it plans to release two emergency patches imminently
71
votes
-
-
Class of QUIC vulnerabilities across implementations allows QPACK amplification attacks against HTTP/3 servers
5 votes -
Critical GitLab flaw (CVSS 10.0) could allow unauthenticated RCE across twelve years of releases
18 votes -
Origin of ECDSA curve seed provided by NSA to NIST in 2000 without explanation turns out to be simple PRNG output with UNIX timestamp as seed
34 votes