AndrewMohawk⁽ⁿᵘˡˡ⁾

12.9K posts

AndrewMohawk⁽ⁿᵘˡˡ⁾

@AndrewMohawk

Sec/Madness @privy_io principal security , @_seal_org technical council prev: HoS @uniswap, D&R/IR @RobinhoodApp, IR @BitMEX, Built @Paterva Maltego with RT

New York, USA

andrewmohawk.com

Joined February 2008

Pinned
AndrewMohawk⁽ⁿᵘˡˡ⁾
@AndrewMohawk
Dec 11, 2025
Fun react bug, (CVE-2025-55183) if you have a server side component and it explicitly or implicitly exposes a stringified argument you can get the source code for that function. Also found DoS, but reported it to vercel instead of meta and some else reported the next day 🙃
00:00
AndrewMohawk⁽ⁿᵘˡˡ⁾
@AndrewMohawk
Aug 11
ITS TRAINING TIME BBY
AndrewMohawk⁽ⁿᵘˡˡ⁾
@AndrewMohawk
Aug 10
I really do think harnesses are falling away, but mines still going for now, forgot to add this to the list from Aug 04 CVE-2026-15830 --
djangoproject.com
Django security releases issued: 6.0.8 and 5.2.17
Posted by Natalia Bidart on Aug. 4, 2026
AndrewMohawk⁽ⁿᵘˡˡ⁾
@AndrewMohawk
Aug 8
Uhhh @_JohnHammond , @endingwithali is looking for you
AndrewMohawk⁽ⁿᵘˡˡ⁾
@AndrewMohawk
Aug 6
wordpress.org/news/2026/08/w… Another lil find for the latest Wordpress