DEV Community

Santosh Kumar Puppala profile picture

Santosh Kumar Puppala

AI/ML Platform Architect securing production GenAI on Kubernetes · CVE-credited security researcher · creator of Norviq & Veridor.

Joined Joined on 
A text message that runs a command: OS command injection in Gammu SMSD (GHSA-9vjj-v46c-c5qf)
santosh_kumarpuppala_96e profile

A text message that runs a command: OS command injection in Gammu SMSD (GHSA-9vjj-v46c-c5qf)

#security #cve #linux #appsec
Comments 2
6 min read
The parent check passed, so the forks' secrets shipped anyway — cleartext CI/CD secrets in OneDev (GHSA-p3rv-f672-8x57)
santosh_kumarpuppala_96e profile

The parent check passed, so the forks' secrets shipped anyway — cleartext CI/CD secrets in OneDev (GHSA-p3rv-f672-8x57)

#security #cve #java #appsec
Comments
7 min read
They scoped the customer and forgot the customer's ledger — a High-severity cross-tenant BOLA in Open Food Network
santosh_kumarpuppala_96e profile

They scoped the customer and forgot the customer's ledger — a High-severity cross-tenant BOLA in Open Food Network

#security #cve #ruby #appsec
Comments
6 min read
The guard checked the URL, not the record it returned (OpenFn Lightning, GHSA-vf9q-phg3-hqj6)
santosh_kumarpuppala_96e profile

The guard checked the URL, not the record it returned (OpenFn Lightning, GHSA-vf9q-phg3-hqj6)

#security #cve #elixir #appsec
Comments
5 min read
How one Owner could take over any account in another company — cross-tenant IDOR in InvoiceShelf (CVE-2026-55610)
santosh_kumarpuppala_96e profile

How one Owner could take over any account in another company — cross-tenant IDOR in InvoiceShelf (CVE-2026-55610)

#security #cve #php #appsec
Comments
3 min read
One unchecked filename let a popular npm document converter write to any path on disk (CVE-2026-54732)
santosh_kumarpuppala_96e profile

One unchecked filename let a popular npm document converter write to any path on disk (CVE-2026-54732)

#security #cve #node #appsec
Comments
3 min read
loading...