News for hackers. Stuff that matters.

A comment on /story/43607744.

Re: by markerz on Monday April 07, 2025 @04:02PM (#43615341)
Hey OP, your DELETE curl endpoint is unauthenticated! I can't DM you on HN and there's no contact on your website, so sorry for the public security disclosure. :(
[ Parent | on HN ]
Re: by mzronek on Monday April 07, 2025 @04:28PM (#43615622)
That's part of the vibe in vibe coding.
[ Parent | on HN ]
Re: by reassess_blind on Monday April 07, 2025 @10:50PM (#43617937)
V.I.B.E - Very Insecure Backend Endpoint
[ Parent | on HN ]
Re: by darubramha on Monday April 07, 2025 @11:09PM (#43618032)
Hey, thank you so much for catching this and calling it out , will take this up and fix it!

Really appreciate you taking the time to look and let me know (even if it had to be in public). I have added a github repo for filing bugs (https://github.com/uncurl/uncurl-support) in the docs page :)

[ Parent | on HN ]