Decision Insights Threat Desk

GoHarbor Harbor deployments that keep the default admin password allow remote authentication and full registry compromise.

A log-injection flaw in LibreChat RAG API 0.7.0 lets authenticated users alter system logs and audit records.

graphql-upload-minimal v1.6.1 contains a prototype pollution flaw that can modify Object.prototype and affect Node.js processes.

CISA details unsafe pickle deserialization in SGLang that can allow remote code execution via the ZMQ broker or replay_request_dump.py

CISA reports antivirus and EDR scanners can miss payloads in ZIP archives with tampered compression metadata.

Viber's Cloak mode on Android and Windows uses a static TLS ClientHello that can be detected and blocked, possibly causing DoS.