blog.arusekk.pl

SourceHut account takeover via build logs (XSS in ansi2html.py) | CVE-2026-92973 | Arusekk blog

A wormable vulnerability allowed anyone able to inject text in a build log on builds.sr.ht (or other instances) to take over accounts who viewed them

If the page stays blank, open it in a new tab. Your Weird rating still works from the top bar.