Parser Differential, TypeScript and AI

A great explanation of the recent vulnerabilities impacting n8n. If you are working in security on TypeScript projects, it's a must read. Breaking Down CVE-2026-25049: How TypeScript Types Failed n8n's Security.

Praetorian is back with another tool (one of their 12 Caesars): Augustus... Make sure you check it out! Introducing Augustus: Open Source LLM Prompt Injection Tool.

If you enjoy parser differential issues, you are going to love this exploit. Don't think "It's a CTF challenge" or "It's just an XSS", read between the lines to find the real gold. When Two Parsers Disagree: Exploiting Query String Differentials for XSS.

A detailed blog post on hacking Antigravity with a lot of interesting details on its inner workings. RCE in Google's AI code editor Antigravity - $10000 Bounty.

Probably one of the lesser-known features of HTTP... Trailers. This post provides details on the feature and explains how they can be leveraged to find security issues. Trailing Danger: exploring HTTP Trailer parsing discrepancies.