Mitigating ImageMagick vulnerabilities in Node.js

Bun v0.6.14

Bun v0.6.12

Bun v0.6.7

Post-mortem Analysis of @ctrl/tinycolor npm Supply Chain Attack via GitHub Actions

A detailed post-mortem analysis of a supply chain attack on the @ctrl/tinycolor npm package. The attack occurred when a malicious GitHub Act

Critical PixelSmash vulnerability in FFmpeg's MagicYUV decoder allows code execution via malformed video files

Researchers have disclosed PixelSmash (CVE-2026-8461), a critical vulnerability in FFmpeg's MagicYUV video decoder with a CVSS score of 8.8.

Analysis of 7-Zip vulnerabilities: CVE-2025-11001 and CVE-2025-11002