4F404 Foundersin404-founders.com·4d ago · 5 min readGitLab CVE-2026-85706: CVSS 10.0 File Read ExploitedGitLab CVE-2026-85706: CVSS 10.0 File Read Exploited GitLab has patched CVE-2026-85706, a CVSS 10.0 path-traversal and authentication-control flaw in the repository commits API that, under affected co00
OZOliver Zehentleitnerinblog.technopathy.club·Sep 9 · 4 min readOne Index, Many Writers: Avoiding Git Merge Conflicts with Deterministic Write AreasWhile working on Keep the Why, I ran into a very ordinary Git problem. There is one shared context/index.md. Developers and coding agents can add new context files in different branches. The changes a24SM
NNavyainnavyakhannahashnodedev.hashnode.dev·Sep 4 · 9 min readLOG-8 Ending: "The Home Stretch" somehow still standingI am writing this one a little (VERYYY) late. GSoC is over now and I am only just sitting down right now to write about my last, Milestone 4 and 5. So this post doesn't have the usual weekly pace, it'00
4F404 Foundersin404-founders.com·Aug 21 · 3 min readGitLab CVE-2026-19478: Critical Flaw Under AttackGitLab shipped an emergency patch on August 17, 2026 for a critical code injection flaw in its GraphQL API that lets an unauthenticated attacker modify or delete public projects and user data. Researc00
MSManu Shuklainecorpit.hashnode.dev·Aug 20 · 13 min readGitLab 19.3 made credit usage caps GA on 20 August 2026 - a cap of 0 still spendsGitLab 19.3 made credit usage caps GA on 20 August 2026 - a cap of 0 still spends Summary. GitLab published its 19.3 release notes on 20 August 2026 and made GitLab Credits usage caps generally availa00
MSManu Shuklainecorpit.hashnode.dev·Aug 5 · 21 min readGitLab to GitHub migration in 2026: the 7 things GEI will not moveGitLab to GitHub migration in 2026: the 7 things GEI will not move Summary. GitHub made GitLab migrations generally available on 3 August 2026 through GitHub Enterprise Importer and a new gh gl2gh com00
OOnyiGlobal2025inonyiglobal2025.hashnode.dev·Aug 4 · 9 min readGitLab 403: "You Are Not Allowed to Push Code to This Project" — FixedContext: After a GitHub account suspension took my public repositories and portfolio offline, I set up GitLab as a mirror so my work stayed accessible during the appeal. What should have been a quick 00
HHugoinhugovalters.hashnode.dev·Jul 27 · 4 min readDeploying Encrypted DNS Internally: DoH and DoT GuideI was on-call when it happened. 3 AM on a Tuesday, and every single production server in our us-east-1 region started resolving api.internal.example.com to a server in Belarus. Our recursive DNS resol00
HHugoinhugovalters.hashnode.dev·Jul 27 · 3 min readNetwork Segmentation: VLANs and Firewall Rules for ProductionIntroduction: Why Your Flat Network is a Liability I once walked into a post-mortem where a single compromised WordPress plugin led to an attacker pivoting from a public web server to a PCI-compliant 00
HHugoinhugovalters.hashnode.dev·Jul 27 · 3 min readSSH Tunneling: The Swiss Army Knife of Networking You're Not UsingI recently watched a DevOps team spend three days arguing over the routing tables of a new WireGuard Site-to-Site tunnel. They just wanted to give a single developer access to a staging Prometheus das00
