Subscribe to X41 Audited CRI-O Runtime’s news feed.
Click on “Follow” and decide if you want to get news from X41 Audited CRI-O Runtime via RSS, as email newsletter, via mobile or on your personal news page.
Subscription to X41 Audited CRI-O Runtime comes without risk as you can unsubscribe instantly at any time.
You can also filter the feed to your needs via topics and keywords so that you only receive the news from X41 Audited CRI-O Runtime which you are really interested in. Click on the blue “Filter” button below to get started.
Website title: Home | X41 D-Sec - Penetration Tests and Source Code Audits
Is this your feed? Claim it!
“Containers are not a security boundary” is a sentence many security professionals repeat like a mantra. In a way, it is true. The Linux kernel has a huge attack surface and container escape vulnerabilities are more common than one would hope for. However, Linux container escape zero-days are not something your run-of-the-mill ransomware atta...
Starlette < 1.0.1 derives request.url from the Host header without sanitization, letting attackers forge a request.url.path that bypasses path-based auth middleware. Thousands of FastAPI and Starlette applications were affected, including vLLM, LiteLLM, MCP servers, and AI agent frameworks.
vLLM Authentication MiddlewareT...
X41 performed a source code audit of vLLM, sponsored and organized by the Open Source Technology Improvement Fund.
vLLM originated at the University of California, Berkeley, and has grown into a w...