POJIA破甲
地图 / on the implications of permitting procedural culling

on the implications of permitting procedural culling

密码学缺陷 / Use of Insufficiently Random Values / #3262848

厂商
curl
严重程度
低危
赏金
—
弱点
Use of Insufficiently Random Values
研究员
@lyb_unaffiliated
披露日期
2025-07-22
资产
https://github.com/curl/curl
CVE
—

该报告还没有中文解读。

原文摘录

摘自原文(5770 字符中的一小部分)
Good day. My name is Lorentso Youriévitch Bogdanov. It has come to my attention that you are in need of higher-quality code review. Rest assured that you are not alone in noticing a certain degree of brain-drain in this field. As you can perhaps imagine, the recent shortage of qualified hackers and …

默认不展示报告全文。以上为简短摘录,完整复现过程请阅读原文。版权归研究员与 curl 所有。

时间线

  • 报告提交
  • 公开披露
阅读 HackerOne 原文 ↗作者 @lyb_unaffiliated · 版权归作者与 curl 所有

同类报告

Invite tokens have Insufficient entropy in GHES Management ConsoleGitHub · 2024-01-12Predictable proposal participant tokens enable unauthorized access and vote submissionNextcloud · 2026-01-04 · $100Usage of unsafe random function in undici for choosing boundaryNode.js · 2025-01-23The initial E2EE password generated by Rocket.Chat mobile can be recovered in a practical timescale.Rocket.Chat · 2024-10-01
on the implications of permitting procedural culling · 破甲 POJIA