Justin Burr

CVE-2023-48094 - XSS Vulnerability

3

As of last night, Cesium is now being flagged by Dependabot. > A cross-site scripting (XSS) vulnerability in CesiumJS v1.111 allows attackers to execute arbitrary code in the context of...

**Describe the bug** A few years back `cimg/go` had a routine patch release come out due to a new version of Go being released. What we weren't expecting is that...

I don't see an example of this anywhere in the docs on platform.openai.com, but `"finish_reason": "tool_calls"` is used by many OpenAI API providers that I'm trying to integrate with. The...

**Describe the bug** After the `cimg/base:current` tag [recently changed](https://github.com/CircleCI-Public/cimg-base/pull/272) from Ubuntu 22 to Ubuntu 24, the checkout command stopped working. This affects self-hosted CircleCI enterprise customers who have NIST 171...

RPM signed with old hash, doesn't work in FIPS mode

3

It seems like many of the RPMs are signed with older digests like MD5 or SHA1? My team is reporting that it won't `dnf install` correctly on machines with FIPS...