SourceHut account takeover via build logs (XSS in ansi2html.py) | CVE-2026-92973 0 ▲ Arusekk blog 52 days ago · Tech · hide · Fediverse post A wormable vulnerability allowed anyone able to inject text in a build log on builds.sr.ht (or other instances) to take over accounts who viewed them Commenting on Bubbles has been removed. Why? If you want to talk about this post, write to the author, use the comments on their blog if it has them, or reply with a "RE:" post on your own blog. Suggestions? feedback@bubbles.town
