Critical vulnerabilities.
Clearly explained.
A focused weekly reading list for understanding the issues that matter.
SAMPLE EDITION
View full edition Inside the critical path
Historical examples — not this week’s news.
CVE-2021-44228
Apache Log4j
How a logging feature turned untrusted text into a path to remote code execution.
CVE-2019-10744
Lodash
Understanding prototype pollution: when merging an object changes more than that object.
CVE-2024-3094
XZ Utils
A backdoor in the software supply chain. Read the original technical investigation that exposed it.