sass-king

SASS King Reverse engineering NVIDIA SASS from controlled kernels to production audits. Article 1 · Article 2 · Knowledge base · Pattern library · SM120 instruction glossary · Encoding notes · Start here · Project structure · Tensor-core chapters · Contributing SASS King is a systematic...

IDA-Processor-Modules

IDA Processor Modules for Uncommon Architectures A collection of processor modules extending IDA Pro with support for uncommon and specialized CPU, DSP, and GPU architectures. These projects grew out of my interest in reverse engineering architectures that aren't natively supported by IDA,...

Ghidra-Rare

Ghidra-Rare Ghidra processor modules SLEIGH for uncommon CPU, DSP and GPU architectures. Target: Ghidra 12.1.4. This project brings to Ghidra the set of architectures covered by Mr-wolf-is-me/IDA-Processor-Modules, a collection of IDA Pro processor modules. Each module here is the Ghidra...

CVE-2026-109574

A flaw was found in Hugo. A path traversal vulnerability in the Sass stylesheet processing component allows malicious themes or modules to access files outside the intended project directory. By supplying crafted stylesheet import directives, an attacker can read sensitive local files and include...

EUVD-2026-98157

Hugo before v0.167.0 contains a path traversal vulnerability in css.Sass that allows malicious themes or modules to read files outside the project root through the Sass compiler's import fallback. Attackers can ship stylesheets with relative, absolute, or symlinked @import or @use targets to...

DEBIAN-CVE-2026-109574

Hugo before v0.167.0 contains a path traversal vulnerability in css.Sass that allows malicious themes or modules to read files outside the project root through the Sass compiler's import fallback. Attackers can ship stylesheets with relative, absolute, or symlinked @import or @use targets to...

CVE-2026-109574

Hugo before v0.167.0 contains a path traversal vulnerability in css.Sass that allows malicious themes or modules to read files outside the project root through the Sass compiler's import fallback. Attackers can ship stylesheets with relative, absolute, or symlinked @import or @use targets to...

UBUNTU-CVE-2026-109574

Hugo before v0.167.0 contains a path traversal vulnerability in css.Sass that allows malicious themes or modules to read files outside the project root through the Sass compiler's import fallback. Attackers can ship stylesheets with relative, absolute, or symlinked @import or @use targets to...

CVE-2026-109574 Hugo before v0.167.0 Path Traversal via css.Sass Import Fallback

Hugo before v0.167.0 contains a path traversal vulnerability in css.Sass that allows malicious themes or modules to read files outside the project root through the Sass compiler's import fallback. Attackers can ship stylesheets with relative, absolute, or symlinked @import or @use targets to...

CVE-2026-109574 Hugo before v0.167.0 Path Traversal via css.Sass Import Fallback

Hugo before v0.167.0 contains a path traversal vulnerability in css.Sass that allows malicious themes or modules to read files outside the project root through the Sass compiler's import fallback. Attackers can ship stylesheets with relative, absolute, or symlinked @import or @use targets to...

CVE-2026-109574 Hugo before v0.167.0 Path Traversal via css.Sass Import Fallback

Hugo before v0.167.0 contains a path traversal vulnerability in css.Sass that allows malicious themes or modules to read files outside the project root through the Sass compiler's import fallback. Attackers can ship stylesheets with relative, absolute, or symlinked @import or @use targets to...

CVE-2026-109574

Hugo before v0.167.0 contains a path traversal vulnerability in css.Sass that allows malicious themes or modules to read files outside the project root through the Sass compiler's import fallback. Attackers can ship stylesheets with relative, absolute, or symlinked @import or @use targets to...

CVE-2026-109574

Hugo versions prior to v0.167.0 are vulnerable to a path traversal vulnerability within the css.Sass component. The root cause lies in the Sass compiler's import fallback mechanism, which allows malicious themes or modules to access files outside the project root. Attackers can leverage styleshee...

hugo: Hugo: Information disclosure via Sass import path traversal

A flaw was found in Hugo. A path traversal vulnerability in the Sass stylesheet processing component allows malicious themes or modules to access files outside the intended project directory. By supplying crafted stylesheet import directives, an attacker can read sensitive local files and include...

PT-2026-111013

Hugo before v0.167.0 contains a path traversal vulnerability in css.Sass that allows malicious themes or modules to read files outside the project root through the Sass compiler's import fallback. Attackers can ship stylesheets with relative, absolute, or symlinked @import or @use targets to...

CVE-2026-109574: Improper Limitation of a Pathname to a Restricted Directory

Hugo before v0.167.0 contains a path traversal vulnerability in css.Sass that allows malicious themes or modules to read files outside the project root through the Sass compiler's import fallback. Attackers can ship stylesheets with relative, absolute, or symlinked @import or @use targets to...

org.webjars.npm:chokidar (>=3.0.2, <=3.6.0), org.webjars.npm:chokidar-cli (3.0.0) +41 more potentially affected by CVE-2026-93687 via org.webjars.npm:braces (>=0.1.5, <=3.0.3)

org.webjars.npm:braces MAVEN version =0.1.5, =3.0.2, =5.1.0, =0.1.1, =3.1.1, =4.0.0, =2.8.0, =10.0.1, =7.3.3, =7.3.3, =7.3.7 and more Source cves: CVE-2026-93687 Source advisory: SNYK:JAVA-ORGWEBJARSNPM-19963946...

Malicious code in link-local-node-sass-puppeteer (npm)

Source: amazon-inspector 9ef68d63ede9194c10251a12380048f4bde948d90eaac0eb971d9cfb2170fca8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in leda-envconfig-odin-sass-loader (npm)

Source: amazon-inspector 545debb26587667e69b5f9503887007f02cbe554eb8a038763455fc702c9e014 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in leda-acamar-sequelize-sass-loader (npm)

Source: amazon-inspector d953ff4007470886cb9390d415da40753ccb4bac042bf6d7663fead61bc4797d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...