Ashraful’s Blog

Back to articles

Tag archive

#disconnected

#openshift #supplychain #pgp #disconnected

oc-mirror CVE-2026-75939: A Signature Check That Runs in the Wrong Order

CVE-2026-75939 lets a forged PGP message pass oc-mirror validation and push a malicious release into a disconnected OpenShift registry.

Oct 5, 20262 min read0 reactions0 comments

#postmortem #supabase #realtime #disconnected

Postmortem: How a Supabase Realtime Bug Disconnected 10k Active Users

On October 17, 2023, at 14:22 UTC, a single unhandled edge case in Supabase Realtime’s WebSocket...

May 2, 202614 min read0 reactions0 comments