ghost-compact

Xint's OpenAI Compaction Research Two major findings in OpenAI's compaction API: GhostCompact : a billing bug that made OpenAI compaction, and the arbitrary inference it can perform, nearly free. Code: ghostcompact.py, ghostscan.py. blog post Compaction Smuggling : steering compaction to copy a...

CVE-2026-33413 etcd: Authorization bypasses in multiple APIs

etcd is a distributed key-value store for the data of a distributed system. Prior to versions 3.4.42, 3.5.28, and 3.6.9, unauthorized users may bypass authentication or authorization checks and call certain etcd functions in clusters that expose the gRPC API to untrusted or partially trusted...