cve-2026-57858: cal.com declines to address stored xss in self-hosted version
expect secure software? please pay $16/mo.
notes
thoughts on security, software, ai, etcetera.
so you think you found a deserialization sink?
exploiting deserialization vectors the easy way, and the hard way. but mostly the easy way.
stop telling developers how to fix vulnerabilities
they are no longer the point of control.