Benjamin Kincses (Dextheking1). Security research focused on AI products and open source. Every finding below was verified locally before it was reported, and serious findings go through each project's own private disclosure process first.
Site: benihacking.top · GitHub: Dextheking1
Counts verified against GitHub on 2026-10-25.
| Security fix PRs merged | 4 |
| Security fix PRs open and under review | 58 |
| GitHub advisories filed, in coordinated disclosure | 20 |
| Advisories published | 0 |
| Coordinated disclosures in progress, all channels | 37 |
| Vendor fixes merged from my disclosures | 7 (KiroCrew, Oct 2026) |
Advisories are published by project maintainers at the end of coordinated disclosure, not by the reporter. The 20 filed advisories are in triage with the maintainers; published ones will be listed here as they land.
| GHSA | Project | Severity | Link |
|---|---|---|---|
| None published yet | 20 advisories filed and in coordinated disclosure |
| Project | PR | Fix |
|---|---|---|
| ruvnet/ruflo | #4416 | Reject .. in roomId, closing a path traversal through the room log path |
| ruvnet/ruflo | #4418 | Unguessable MCP session ids (crypto randomUUID) |
| kirodotdev/KiroCrew | #23327 | Snapshot tar filter rejects special files (FIFO, device nodes) on extraction |
| takiAA/twitter-scraper-mcp | #13 | Worker child process receives an environment allowlist instead of the server's full environment |
18 findings reported through the project's security process. The vendor checked every item against current main and merged fixes for six items:
- Snapshot restore paused executable state: PR 24318
- Cron approval_mode "auto" restricted to the owner: PR 24352
- macOS cc tier masks ~/.aws: PR 24319
- Episodic header and DATA framing: PR 24330
- Installer pins: PR 24321, PR 24332
- Legacy webhook token masked in settings reads, plus one extra unmasked secret the vendor found and fixed in the same pass: PR 24324
Added to the project's contributor list, Oct 2026.
58 security fix and hardening PRs are open. A selection:
- supabase/postgres-meta #1171: enum allowlists closing SQL injection in trigger and policy creation
- supabase/auth #2885: timeout and size cap on the SAML metadata fetch
- vxcontrol/pentagi #468 and #469: privilege checks on REST token endpoints; caps on terminal directory reads
- deepseek-ai/Janus #243, #244, #245:
trust_remote_coderemoved, demo sharing defaults fixed, checkpoint loads pinned toweights_only - deepseek-ai/DeepSeek-VL2 #158, DeepSeek-V3 #1724 and #1725, DeepSeek-Coder #723
- localhost8083/marscli #1 to #4: credential storage and updater hardening for an OpenCode fork
- CodebuffAI/freebuff #1545 and #1546: sponsored-mode refusal walk fails closed;
read_urlrefuses under a proxy instead of dropping DNS pinning - Logflare/logflare #4200 and #4201: atom exhaustion via flash keys; PII redaction header and results cache fixes
- pollinations/pollinations #18163 and #18164: publishable keys stripped of account scopes; quest reward parsing bounded
- Comfy-Org/ComfyUI-Manager #3410 and Comfy-Org/Comfy-Desktop #1786: TLS verification respected in share requests; http(s) allowlist on window-open
- cloudflare/circl #711: blind RSA salt read from the supplied randomness source
- Audit the public source code locally. No live service is probed.
- Prove the finding on local ground only: extracted functions, harnesses, or a local instance, with synthetic data, and state the proof level honestly.
- Write the fix: minimal, with a regression test that fails before and passes after.
- Disclose through the project's own process. Private report first for anything serious; a public fix PR only where the fix does not teach the exploit.
- Ask for a published advisory, a CVE, and Finder credit under the name Benjamin Kincses (Dextheking1).
GitHub: Dextheking1 · Site: benihacking.top
To report a vulnerability in a project I contribute to, use that project's own security process.