CVE-2026-40175: Cách Axios Biến Prototype Pollution Thành Toàn Bộ Cloud Compromise
Phân tích sâu về gadget chain của Axios giúp escalate prototype pollution thành RCE và bypass AWS IMDSv2. CVSS 9.9.
Blog
Thẻ: #nodejs
Xem tất cả thẻ
- # mcp
- # security
- # supply-chain
- # devops
- # ai
- # ai-security
- # python
- # Agents
- # ai-agents
- # claude
- # claude-code
- # cursor
- # cve
- # cybersecurity
- # npm
- # terminal
- # agentic-ai
- # ai-infrastructure
- # aws
- # axios
- # data-engineering
- # developer-tools
- # dotfiles
- # Free Threading
- # frontend
- # github-copilot
- # litellm
- # malware
- # migration
- # mythos
- # neovim
- # performance
- # rust
- # tieng-viet
- # vietnamese
- # vulnerability
- # workflow
- # zero-day
- # a2a
- # aerospace
- # agent-security
- # agent-skills
- # agentic-workflows
- # AI systems
- # ai-architecture
- # AI-safety
- # ai-tooling
- # Apple
- # APT
- # architecture
- # argocd
- # beads
- # best-practices
- # Budget
- # byteDance
- # canisterworm
- # Catppuccin
- # chrome-devtools
- # cicd
- # cli
- # Code generation
- # coding-agents
- # commoditization
- # Context engineering
- # CPython
- # CSS
- # cve-2026-7482
- # Data Science
- # database
- # debugging
- # deep-reasoning
- # defense-in-depth
- # design-tools
- # developer-experience
- # developer-tooling
- # dirty-frag
- # docker
- # Ecosystem
- # figma
- # firefox
- # floci
- # Frontier models
- # gemini
- # Gemma
- # gguf
- # git
- # github-actions
- # governance
- # Harness
- # Healthcare AI
- # Homelab
- # incident-response
- # JavaScript
- # jit
- # kubernetes
- # langchain
- # Lazy Imports
- # lighthouse
- # linux-kernel
- # LLM
- # local-dev
- # local-llm
- # localstack
- # looped-llm
- # macos
- # Maturity
- # memory
- # meta-learning
- # minimax
- # mle-bench
- # monorepo
- # mozilla
- # multi-agent
- # nghiên-cứu-lỗ-hổng
- # nodejs
- # North Korea
- # nushell
- # oauth
- # ollama
- # Open models
- # OpenClaw
- # OWASP
- # pandas
- # PEP
- # polars
- # Portfolio
- # prediction
- # production-ai
- # productivity
- # protocols
- # prototype-pollution
- # pyscript
- # Python 3.14
- # Python 3.15
- # rce
- # Release
- # Research
- # responsible-disclosure
- # ruff
- # Self-distillation
- # self-improvement
- # Side project
- # sql-injection
- # Stanford
- # stow
- # task-graph
- # terraform
- # tmux
- # vercel
- # Web Development
- # window-manager
- # worm
- # zero-trust
- # zsh