Writing
Software engineering and cybersecurity research.
securityOct 22, 2026CVE-2026-111181: How one gzip request crashes body-parser
Root cause analysis, proof of concept, and remediation guidance for a denial-of-service flaw in body-parser
CVE-2026-111181body-parserexpress.jsvulnerability
securityApr 2, 2026CVE-2026-38728: Memory exhaustion in smtp-server's command parser
smtp-server's command parser allows remote clients to consume server memory by sending data without newline characters.
CVE-2026-38728smtp-servervulnerability
developmentMar 18, 2026Disabling Prisma Telemetry
How to disable Prisma telemetry in your projects
prismatelemetryorm
developmentFeb 14, 2026Musicboard Export
Building a data export tool for the popular Musicboard website
musicboardexport