SecurityHorrors | BlogStories you never want to feel on your own skinhttps://securityhorrors.com/en-usNGINX: Three Cracks in the Proxy Wallhttps://securityhorrors.com/all/nginx-three-cracks-proxy-wall/https://securityhorrors.com/all/nginx-three-cracks-proxy-wall/TLDR and affected version summary for NGINX Rift, CVE-2026-42926, and CVE-2026-42946Wed, 13 May 2026 00:00:00 GMTMini Shai-Hulud: The Package That Crawled Through CIhttps://securityhorrors.com/all/mini-shai-hulud-supply-chain-worm/https://securityhorrors.com/all/mini-shai-hulud-supply-chain-worm/TLDR and affected package summary for the Mini Shai-Hulud npm and PyPI supply-chain campaign.Mon, 11 May 2026 00:00:00 GMTReact and Next.js: Thirteen Doors Left Openhttps://securityhorrors.com/all/react-nextjs-may-2026-security-release/https://securityhorrors.com/all/react-nextjs-may-2026-security-release/TLDR and affected version summary for the May 2026 React and Next.js security advisories.Thu, 07 May 2026 00:01:00 GMTDirty Frag: Two Kernel Teeth Under the Floorboardshttps://securityhorrors.com/all/linux-dirty-frag-kernel-lpe/https://securityhorrors.com/all/linux-dirty-frag-kernel-lpe/TLDR and affected system summary for Dirty Frag, CVE-2026-43284 and CVE-2026-43500.Thu, 07 May 2026 00:00:00 GMTBleeding Llama: The Local AI That Remembered Too Muchhttps://securityhorrors.com/all/ollama-bleeding-llama-memory-leak/https://securityhorrors.com/all/ollama-bleeding-llama-memory-leak/TLDR and affected version summary for CVE-2026-7482, the Bleeding Llama vulnerability in Ollama.Fri, 01 May 2026 00:00:00 GMTCopyFail: Root Was Only 732 Bytes Awayhttps://securityhorrors.com/all/linux-copyfail-root-escalation/https://securityhorrors.com/all/linux-copyfail-root-escalation/TLDR and affected system summary for CVE-2026-31431, the Linux CopyFail local privilege escalation.Wed, 29 Apr 2026 00:00:00 GMT