Research
Technical findings and failure analysis.
Authored analyses and public source-listed advisories. Read the evidence, affected conditions, practical checks and limits.
-
NS-FL-0001Disclosed vulnerability
Primary sourceWhen middleware carries the authorization boundary
Next.js disclosed a flaw that could bypass authorization performed in middleware. Which runtime and host served the app decided exposure.
-
NS-FL-0002Researcher demonstration
Primary sourceA public key met an open data boundary
Wiz reported unauthorized reads and writes in Moltbook’s Supabase deployment. The access policies, not the presence of a publishable key, were the central issue.
-
NS-FL-0003Researcher demonstration
Primary sourcePublic issue text redirected an agent into private repositories
In a controlled setup, an agent read a malicious public issue, pulled private repository data and published it in a public pull request.
No authored analysis is currently filed under this subject. Search source-listed Vigilance reports for additional public material.
These three founding entries were reviewed on 29 October 2026. Topic labels organize the collection; they do not imply complete coverage.
Vigilance / Public intelligence
Vulnerability advisories
Search by CVE, package or technology to find affected versions and the vendor’s recommended fix.
Each report links to its sources. Check the listed conditions against your own deployment to determine exposure.
Publication records and corrections
Failure Ledger entries retain their identifiers, source references, technical scope and review dates. Vigilance reports expose revision history and source timestamps. Read the editorial practice or submit a correction.