Tag
A researcher discovered an XSS vulnerability in the ansi2html library used by SourceHut, which could allow account takeover via build logs, and describes the discovery and fix process.