Security

• 3 Nov 2026Django 6.1.3: a base64 upload can exhaust memory before any check

  FILE_UPLOAD_MAX_MEMORY_SIZE does not protect base64 uploads. What CVE-2026-108147 fixes, and how to cap the decoded size yourself.

  Python

• 3 Nov 2026LLM API keys are billing credentials

  A leaked key does not compromise your database, it opens your cloud bill. What to do before the LLMjacking campaign finds you.

  LLM

• 2 Nov 2026Bypassing Read-Only SQL Validation in DBHub

  A two-character disagreement about where a SQL comment starts is enough to turn a read-only gateway into a write path.

  LLM

← All tags