https://github.com/advisories/GHSA-f82v-jwr5-mffw
>It is possible to bypass authorization checks within a Next.js application, if the authorization check occurs in middleware.
https://security.snyk.io/vuln/SNYK-JS-NEXT-9508709
>It is possible to bypass authorization checks within a Next.js application, if the authorization check occurs in middleware.
https://security.snyk.io/vuln/SNYK-JS-NEXT-9508709
Affected versions of this package are vulnerable to Improper Authorization due to the improper handling of the x-middleware-subrequest header. An attacker can bypass authorization checks by sending crafted requests containing this specific header.
CVE-2025-30204
golang-jwt is a Go implementation of JSON Web Tokens. Prior to 5.2.2 and 4.5.2, the function parse.ParseUnverified splits (via a call to strings.Split) its argument (which is untrusted data) on periods. As a result, in the face of a malicious request whose Authorization header consists of Bearer followed by many period characters, a call to that function incurs allocations to the tune of O(n) bytes (where n stands for the length of the function's argument), with a constant factor of about 16. This issue is fixed in 5.2.2 and 4.5.2.
golang-jwt is a Go implementation of JSON Web Tokens. Prior to 5.2.2 and 4.5.2, the function parse.ParseUnverified splits (via a call to strings.Split) its argument (which is untrusted data) on periods. As a result, in the face of a malicious request whose Authorization header consists of Bearer followed by many period characters, a call to that function incurs allocations to the tune of O(n) bytes (where n stands for the length of the function's argument), with a constant factor of about 16. This issue is fixed in 5.2.2 and 4.5.2.
Forwarded from vx-underground
When you see someone on social media discussing using AI to code it is your personal responsibility to encourage them. Tell them to "ignore the haters" and "keep it up!".
This will keep our cybersecurity pockets phat for generations to come.
This will keep our cybersecurity pockets phat for generations to come.
😁2
This media is not supported in your browser
VIEW IN TELEGRAM
Think you know Gemini? 🤔 Think again.
Meet Gemini 2.5: our most intelligent model 💡 The first release is Pro Experimental, which is state-of-the-art across many benchmarks - meaning it can handle complex problems and give more accurate responses. Try it now → https://goo.gle/4c2HKjf
Tweet source
Meet Gemini 2.5: our most intelligent model 💡 The first release is Pro Experimental, which is state-of-the-art across many benchmarks - meaning it can handle complex problems and give more accurate responses. Try it now → https://goo.gle/4c2HKjf
Tweet source
This media is not supported in your browser
VIEW IN TELEGRAM
What does thinking for AI mean? 💭
When you prompt Gemini 2.5, it reasons through its thoughts before responding — effectively mimicking how humans process thoughts.
It approaches a problem gradually, refines potential solutions, and chooses the best one.
Tweet source
When you prompt Gemini 2.5, it reasons through its thoughts before responding — effectively mimicking how humans process thoughts.
It approaches a problem gradually, refines potential solutions, and chooses the best one.
Tweet source
BREAKING: Gemini 2.5 Pro is now #1 on the Arena leaderboard - the largest score jump ever (+40 pts vs Grok-3/GPT-4.5)! 🏆
Tested under codename "nebula"🌌, Gemini 2.5 Pro ranked #1🥇 across ALL categories and UNIQUELY #1 in Math, Creative Writing, Instruction Following, Longer
Source
Tested under codename "nebula"🌌, Gemini 2.5 Pro ranked #1🥇 across ALL categories and UNIQUELY #1 in Math, Creative Writing, Instruction Following, Longer
Source
Gemini 2.5: Our most intelligent AI model
https://blog.google/technology/google-deepmind/gemini-model-thinking-updates-march-2025/
(it can be opened in instant view of telegram)
https://blog.google/technology/google-deepmind/gemini-model-thinking-updates-march-2025/
Google
Gemini 2.5: Our most intelligent AI model
Gemini 2.5 is our most intelligent AI model, now with thinking.