2026-05-09
cve
apache-camel
jms
CVE-2026-40453: How I Found an Incomplete Fix in Apache Camel's JMS Header Filtering
The fix for CVE-2025-27636 only patched HTTP components. I found the same case-variant header injection still worked via JMS — leading to remote code execution.
2026-04-10
cve
flux
kubernetes
CVE-2026-40109 — Flux GCR Receiver JWT Audience and Email Bypass
TL;DR
2026-03-14
DevSecOps
Security
CI/CD
Are You Defending Your Code at the Right Stage?
Most teams defend their code at the wrong stage - too late, too noisy, too reactive. Here's how Shift Left and Shift Right together give you complete coverage across every...