@offseq.bsky.social on Bluesky

Post

OffSequence

offseq.bsky.social

did:plc:t5t6qep2vfipbi7f54demwev

HIGH severity: CallBackery <0.62.0 exposes sensitive config dumps in /tmp — world-readable, exploitable via symlink. Upgrade to 0.62.0+ to secure credentials. https://radar.offseq.com/threat/cve-2026-118990-cwe-379-creation-of-temporary-file-in-directory-with-insecure-permissions-in-1f67aa1816ead... https://radar.offseq.com/threat/cve-2026-118990-cwe-379-creation-of-temporary-file-in-directory-with-insecure-permissions-in-1f67aa1816eadbc4

2026-10-30T13:30:37.671Z

Enable JavaScript to use Bluesky.

Learn more about Bluesky at bsky.social and atproto.com.