Skip to content

README.md

Latest commit

 

History

History
80 lines (57 loc) · 5.94 KB

README.md

File metadata and controls

80 lines (57 loc) · 5.94 KB
Raw

Security research

Benjamin Kincses (Dextheking1). Security research focused on AI products and open source. Every finding below was verified locally before it was reported, and serious findings go through each project's own private disclosure process first.

Site: benihacking.top · GitHub: Dextheking1

Record

Counts verified against GitHub on 2026-10-25.
Security fix PRs merged 4
Security fix PRs open and under review 58
GitHub advisories filed, in coordinated disclosure 20
Advisories published 0
Coordinated disclosures in progress, all channels 37
Vendor fixes merged from my disclosures 7 (KiroCrew, Oct 2026)

Advisories are published by project maintainers at the end of coordinated disclosure, not by the reporter. The 20 filed advisories are in triage with the maintainers; published ones will be listed here as they land.

Published advisories

GHSA Project Severity Link
None published yet 20 advisories filed and in coordinated disclosure

Merged security fixes

Project PR Fix
ruvnet/ruflo #4416 Reject .. in roomId, closing a path traversal through the room log path
ruvnet/ruflo #4418 Unguessable MCP session ids (crypto randomUUID)
kirodotdev/KiroCrew #23327 Snapshot tar filter rejects special files (FIFO, device nodes) on extraction
takiAA/twitter-scraper-mcp #13 Worker child process receives an environment allowlist instead of the server's full environment

Vendor-confirmed disclosures

KiroCrew (kirodotdev/KiroCrew), disclosed Oct 2026

18 findings reported through the project's security process. The vendor checked every item against current main and merged fixes for six items:

  • Snapshot restore paused executable state: PR 24318
  • Cron approval_mode "auto" restricted to the owner: PR 24352
  • macOS cc tier masks ~/.aws: PR 24319
  • Episodic header and DATA framing: PR 24330
  • Installer pins: PR 24321, PR 24332
  • Legacy webhook token masked in settings reads, plus one extra unmasked secret the vendor found and fixed in the same pass: PR 24324

Added to the project's contributor list, Oct 2026.

Selected fixes under review

58 security fix and hardening PRs are open. A selection:

  • supabase/postgres-meta #1171: enum allowlists closing SQL injection in trigger and policy creation
  • supabase/auth #2885: timeout and size cap on the SAML metadata fetch
  • vxcontrol/pentagi #468 and #469: privilege checks on REST token endpoints; caps on terminal directory reads
  • deepseek-ai/Janus #243, #244, #245: trust_remote_code removed, demo sharing defaults fixed, checkpoint loads pinned to weights_only
  • deepseek-ai/DeepSeek-VL2 #158, DeepSeek-V3 #1724 and #1725, DeepSeek-Coder #723
  • localhost8083/marscli #1 to #4: credential storage and updater hardening for an OpenCode fork
  • CodebuffAI/freebuff #1545 and #1546: sponsored-mode refusal walk fails closed; read_url refuses under a proxy instead of dropping DNS pinning
  • Logflare/logflare #4200 and #4201: atom exhaustion via flash keys; PII redaction header and results cache fixes
  • pollinations/pollinations #18163 and #18164: publishable keys stripped of account scopes; quest reward parsing bounded
  • Comfy-Org/ComfyUI-Manager #3410 and Comfy-Org/Comfy-Desktop #1786: TLS verification respected in share requests; http(s) allowlist on window-open
  • cloudflare/circl #711: blind RSA salt read from the supplied randomness source

Method

  1. Audit the public source code locally. No live service is probed.
  2. Prove the finding on local ground only: extracted functions, harnesses, or a local instance, with synthetic data, and state the proof level honestly.
  3. Write the fix: minimal, with a regression test that fails before and passes after.
  4. Disclose through the project's own process. Private report first for anything serious; a public fix PR only where the fix does not teach the exploit.
  5. Ask for a published advisory, a CVE, and Finder credit under the name Benjamin Kincses (Dextheking1).

Contact

GitHub: Dextheking1 · Site: benihacking.top

To report a vulnerability in a project I contribute to, use that project's own security process.