https://nefariousplan.com/ 2026-09-15T22:31:19.146Z weekly 1 https://nefariousplan.com/about 2026-09-15T22:31:19.146Z yearly 0.5 https://nefariousplan.com/for-hire 2026-09-15T22:31:19.146Z yearly 0.6 https://nefariousplan.com/pgp 2026-09-15T22:31:19.146Z yearly 0.4 https://nefariousplan.com/patterns 2026-09-15T22:31:19.146Z weekly 0.8 https://nefariousplan.com/posts/maglev-checksmi-ignored-elidable 2026-09-14T17:01:05.336Z yearly 0.7 https://nefariousplan.com/posts/dnd-cf7-cve-2026-5718-nonce-mint-blocks-curl 2026-09-12T17:04:18.676Z yearly 0.7 https://nefariousplan.com/posts/langchain-dumps-forwarded-lc-loads-trusted-it 2026-09-10T17:09:28.212Z yearly 0.7 https://nefariousplan.com/posts/cve-2025-33053-the-other-half-got-a-doc-edit 2026-09-08T17:02:38.129Z yearly 0.7 https://nefariousplan.com/posts/alfresco-share-blacklist-misses-the-semicolon 2026-09-07T17:04:48.576Z yearly 0.7 https://nefariousplan.com/posts/cve-2026-2441-vulnerable-chrome-is-a-404 2026-09-05T17:09:36.749Z yearly 0.7 https://nefariousplan.com/posts/nginx-ui-install-was-on-the-public-router 2026-09-03T17:08:44.401Z yearly 0.7 https://nefariousplan.com/posts/vite-fs-route-returns-403-hmr-socket-returns-the-file 2026-09-02T17:07:51.496Z yearly 0.7 https://nefariousplan.com/posts/cve-2026-0300-seven-pocs-four-defenders-two-placeholders 2026-09-01T17:00:48.185Z yearly 0.7 https://nefariousplan.com/posts/ollama-7482-the-channel-is-a-quantizer 2026-08-30T17:07:07.596Z yearly 0.7 https://nefariousplan.com/posts/zimbra-restfilter-javax-servlet-include-was-a-form-field 2026-08-28T17:11:40.796Z yearly 0.7 https://nefariousplan.com/posts/postiz-cve-2026-42298-add-environment-shipped-rce 2026-08-27T17:10:22.017Z yearly 0.7 https://nefariousplan.com/posts/px4-temporal-cascade-is-a-for-loop 2026-08-25T17:11:40.804Z yearly 0.7 https://nefariousplan.com/posts/n8n-cve-2026-21858-req-body-files-was-formidables-name 2026-08-24T17:00:14.302Z yearly 0.7 https://nefariousplan.com/posts/wcdp-extension-is-a-separate-field 2026-08-22T17:02:27.188Z yearly 0.7 https://nefariousplan.com/posts/dataease-cve-2025-32966-precondition-was-a-length-check 2026-08-21T17:05:25.308Z yearly 0.7 https://nefariousplan.com/posts/mlflow-basic-auth-only-gated-flask 2026-08-20T17:02:21.462Z yearly 0.7 https://nefariousplan.com/posts/weaver-ecology-22679-endpoint-was-named-debug 2026-08-18T17:08:35.108Z yearly 0.7 https://nefariousplan.com/posts/papercut-2023-27351-keepalive-after-the-semicolon 2026-08-17T17:07:14.368Z yearly 0.7 https://nefariousplan.com/posts/watchguard-iked-build-number-comes-before-the-overflow 2026-08-15T17:11:44.532Z yearly 0.7 https://nefariousplan.com/posts/allegra-token-was-the-hash-of-its-expiration 2026-08-14T18:37:20.375Z yearly 0.7 https://nefariousplan.com/posts/ivanti-22457-end-of-life-was-the-lab 2026-08-13T17:01:17.757Z yearly 0.7 https://nefariousplan.com/posts/ghes-extracted-signatures-before-decryption 2026-08-11T17:02:07.988Z yearly 0.7 https://nefariousplan.com/posts/activemq-jmx-denied-schemes-was-one 2026-08-10T17:05:53.014Z yearly 0.7 https://nefariousplan.com/posts/vm2-suppressederror-carries-what-v8-threw 2026-08-09T17:05:59.682Z yearly 0.7 https://nefariousplan.com/posts/vm2-jstag-trytable-is-bytecode 2026-08-08T17:08:13.480Z yearly 0.7 https://nefariousplan.com/posts/vm2-cve-2026-24118-resetpromisespecies-has-a-sibling 2026-08-06T17:40:38.149Z yearly 0.7 https://nefariousplan.com/posts/adbd-cve-2026-0073-evp-pkey-cmp-was-the-iked-bug 2026-08-05T17:11:23.196Z yearly 0.7 https://nefariousplan.com/posts/vm2-cve-2026-24120-readme-already-admits 2026-08-04T17:07:26.707Z yearly 0.7 https://nefariousplan.com/posts/churchcrm-auth-checks-the-whole-uri 2026-08-02T17:06:49.961Z yearly 0.7 https://nefariousplan.com/posts/plunk-cve-2026-34975-schema-missed-two-of-eight 2026-07-31T17:20:36.851Z yearly 0.7 https://nefariousplan.com/posts/mcp-atlassian-the-patch-guarded-the-writes 2026-07-29T17:05:13.611Z yearly 0.7 https://nefariousplan.com/posts/adx-mcp-three-safe-tools-call-execute 2026-07-28T17:10:07.512Z yearly 0.7 https://nefariousplan.com/posts/vczapi-cve-2026-1368-patch-is-two-characters 2026-07-26T17:08:22.038Z yearly 0.7 https://nefariousplan.com/posts/astro-shipped-two-image-endpoints 2026-07-24T17:24:26.479Z yearly 0.7 https://nefariousplan.com/posts/liquidfiles-lockout-reads-the-bug 2026-07-23T17:10:22.582Z yearly 0.7 https://nefariousplan.com/posts/proftpd-mod-sql-the-heuristic-was-for-one-caller 2026-07-22T17:08:54.375Z yearly 0.7 https://nefariousplan.com/posts/chamilo-install-ajax-was-install-only-by-filename 2026-07-21T17:05:06.314Z yearly 0.7 https://nefariousplan.com/posts/asustor-vpn-escapes-credentials-not-server 2026-07-20T17:12:26.320Z yearly 0.7 https://nefariousplan.com/posts/litellm-cve-2026-42208-hashed-token-was-a-parameter-name 2026-07-19T18:40:29.977Z yearly 0.7 https://nefariousplan.com/posts/temp-login-token-field-is-a-filter 2026-07-17T17:11:41.869Z yearly 0.7 https://nefariousplan.com/posts/mina-fix-shipped-on-one-branch 2026-07-15T17:08:34.772Z yearly 0.7 https://nefariousplan.com/posts/flowise-converttovalidjsonstring-is-eval 2026-07-14T17:09:49.985Z yearly 0.7 https://nefariousplan.com/posts/craft-cms-cve-2025-32432-yii-fix-was-already-out 2026-07-13T17:09:56.431Z yearly 0.7 https://nefariousplan.com/posts/flowise-cve-2026-30824-whitelist-has-no-criterion 2026-07-12T17:03:44.811Z yearly 0.7 https://nefariousplan.com/posts/midi-synth-empty-api-key-is-the-payload 2026-07-10T17:30:33.866Z yearly 0.7 https://nefariousplan.com/posts/flowise-forgot-password-token-in-the-response 2026-07-09T17:04:18.029Z yearly 0.7 https://nefariousplan.com/posts/langflow-flow-id-authorized-data-ran 2026-07-07T18:26:11.206Z yearly 0.7 https://nefariousplan.com/posts/cve-2026-32202-trust-check-at-the-click 2026-07-06T17:02:35.540Z yearly 0.7 https://nefariousplan.com/posts/php-cgi-cve-2012-1823-2024-patch-removed-the-feature 2026-07-05T17:02:30.642Z yearly 0.7 https://nefariousplan.com/posts/beyondtrust-cve-2024-12356-treasury-was-the-poc 2026-07-04T17:08:01.662Z yearly 0.7 https://nefariousplan.com/posts/peoplesoft-cve-2026-35273-psemhub-deserializes-its-peers 2026-07-02T07:47:07.138Z yearly 0.7 https://nefariousplan.com/posts/asustor-adm-vpnupload-zero-mitigations 2026-06-30T17:20:32.436Z yearly 0.7 https://nefariousplan.com/posts/checkpoint-cve-2026-50751-vendor-id-bit-turns-off-the-certificate-check 2026-06-29T14:56:35.043Z yearly 0.7 https://nefariousplan.com/posts/prefect-cve-2026-5366-gitrepository-skipped-the-end-of-options-separator 2026-06-27T15:47:16.124Z yearly 0.7 https://nefariousplan.com/posts/libssh2-cve-2026-55199-ext-info-loop-skipped-the-return-check 2026-06-27T14:53:06.988Z yearly 0.7 https://nefariousplan.com/posts/libssh2-cve-2026-55200-chacha20-branch-skipped-the-precheck 2026-06-27T14:39:27.679Z yearly 0.7 https://nefariousplan.com/posts/radare2-cve-2026-40517-fn-skipped-the-base64-envelope 2026-06-25T17:03:42.144Z yearly 0.7 https://nefariousplan.com/posts/ktransformers-cve-2026-26210-only-caller-was-on-localhost 2026-06-24T17:03:13.102Z yearly 0.7 https://nefariousplan.com/posts/unifi-cve-2026-34910-gate-read-raw-router-read-normalized 2026-06-23T19:21:41.149Z yearly 0.7 https://nefariousplan.com/posts/cve-2026-11645-v8-kev-three-pocs-no-oob 2026-06-23T15:35:30.286Z yearly 0.7 https://nefariousplan.com/posts/adguard-home-auth-outside-h2c 2026-06-21T17:06:20.638Z yearly 0.7 https://nefariousplan.com/posts/node-cve-2026-21636-uds-is-not-net 2026-06-19T17:16:11.336Z yearly 0.7 https://nefariousplan.com/posts/xerte-cve-2026-34413-redirect-without-exit 2026-06-17T17:01:30.437Z yearly 0.7 https://nefariousplan.com/posts/litespeed-cpanel-cve-2026-54420-namecheap-reported-from-production 2026-06-15T23:19:00.351Z yearly 0.7 https://nefariousplan.com/posts/weblogic-cve-2024-21182-opaquereference-has-a-sibling 2026-06-15T19:04:09.675Z yearly 0.7 https://nefariousplan.com/posts/opencode-cve-2026-22812-patched-the-cors-not-the-auth 2026-06-15T17:03:56.988Z yearly 0.7 https://nefariousplan.com/posts/avada-builder-no-conditional-tag-table 2026-06-13T15:42:34.548Z yearly 0.7 https://nefariousplan.com/posts/splunk-cve-2026-20253-database-field-is-conninfo 2026-06-13T01:44:36.961Z yearly 0.7 https://nefariousplan.com/posts/inetutils-telnetd-cve-2026-24061-patch-sanitized-seven 2026-06-12T07:49:49.382Z yearly 0.7 https://nefariousplan.com/posts/mirasvit-cve-2026-45247-poc-cannot-unserialize 2026-06-11T18:19:48.825Z yearly 0.7 https://nefariousplan.com/posts/spring-data-rest-pathtospel-did-what-its-name-said 2026-06-11T17:13:47.258Z yearly 0.7 https://nefariousplan.com/posts/ivanti-sentry-cve-2026-10520-patched-the-argument-not-the-call 2026-06-10T02:54:46.554Z yearly 0.7 https://nefariousplan.com/posts/langflow-cve-2025-34291-warned-then-installed 2026-06-08T15:12:56.082Z yearly 0.7 https://nefariousplan.com/posts/freepbx-cve-2025-57819-class-exists-was-the-include 2026-06-06T23:00:04.746Z yearly 0.7 https://nefariousplan.com/posts/solarwinds-servu-cve-2026-28318-patched-the-path-not-the-decoder 2026-06-05T18:59:20.233Z yearly 0.7 https://nefariousplan.com/posts/everest-forms-cve-2026-3300-sanitized-for-html-fed-to-eval 2026-06-05T10:55:27.235Z yearly 0.7 https://nefariousplan.com/posts/erlang-otp-cve-2025-32433-authenticated-was-tracked-never-gated 2026-06-03T07:37:10.024Z yearly 0.7 https://nefariousplan.com/posts/mikroorm-cve-2026-34220-raw-was-a-property-name 2026-06-01T17:07:12.635Z yearly 0.7 https://nefariousplan.com/posts/crushftp-cve-2025-54309-as2-receiver-authenticated-the-admin 2026-05-31T17:01:29.956Z yearly 0.7 https://nefariousplan.com/posts/wp-maps-pro-cve-2026-8732-temp-access-creates-admins 2026-05-30T07:29:57.069Z yearly 0.7 https://nefariousplan.com/posts/pan-os-cve-2026-0257-cookie-cert-was-the-tls-cert 2026-05-29T23:04:07.956Z yearly 0.7 https://nefariousplan.com/posts/next-middleware-cve-2025-29927-recursion-guard-was-the-bypass 2026-05-29T17:05:42.341Z yearly 0.7 https://nefariousplan.com/posts/wpcode-cve-2026-8832-custom-caps-not-on-the-cpt 2026-05-28T22:53:55.441Z yearly 0.7 https://nefariousplan.com/posts/camel-cve-2026-40453-five-subclasses-needed-the-same-line 2026-05-28T17:14:35.044Z yearly 0.7 https://nefariousplan.com/posts/tanstack-cve-2026-45321-bundle-size-poisoned-release-restored 2026-05-27T19:07:16.672Z yearly 0.7 https://nefariousplan.com/posts/lenovo-lnvmsrio-cve-2025-8061-driver-name-is-the-spec 2026-05-26T17:03:41.068Z yearly 0.7 https://nefariousplan.com/posts/protobufjs-cve-2026-41242-type-name-was-javascript 2026-05-24T17:10:49.142Z yearly 0.7 https://nefariousplan.com/posts/mattermost-cve-2025-25279-fileid-was-never-an-id 2026-05-22T17:03:11.142Z yearly 0.7 https://nefariousplan.com/posts/divi-form-builder-cve-2026-5118-administrator-existed 2026-05-21T14:55:59.219Z yearly 0.7 https://nefariousplan.com/posts/drupal-cve-2026-9082-the-comment-said-values 2026-05-21T07:35:46.564Z yearly 0.7 https://nefariousplan.com/posts/cve-2010-0249-kev-deadline-is-a-census 2026-05-20T19:05:12.705Z yearly 0.7 https://nefariousplan.com/posts/n8n-git-cve-2026-21877-helper-was-already-there 2026-05-19T17:02:44.175Z yearly 0.7 https://nefariousplan.com/posts/graphql-ruby-cve-2025-27407-loaded-the-schema-by-compiling-it 2026-05-18T17:13:25.043Z yearly 0.7 https://nefariousplan.com/posts/handlebars-cve-2026-33937-trusts-its-own-ast 2026-05-16T17:14:41.424Z yearly 0.7 https://nefariousplan.com/posts/cisco-cve-2026-20182-the-exploit-is-a-bitcoin-address 2026-05-15T19:06:01.237Z yearly 0.7 https://nefariousplan.com/posts/exchange-cve-2026-42897-mitigation-invisible-to-health-checker 2026-05-15T18:58:41.626Z yearly 0.7 https://nefariousplan.com/posts/nginx-cve-2026-42945-the-other-half-of-the-2012-patch 2026-05-15T18:24:54.589Z yearly 0.7 https://nefariousplan.com/posts/ninja-forms-cve-2026-0740-two-patches 2026-05-15T17:04:25.024Z yearly 0.7 https://nefariousplan.com/posts/llama-cpp-cve-2026-34159-deserializer-three-cves-have-not-patched 2026-05-14T17:02:37.463Z yearly 0.7 https://nefariousplan.com/posts/zabbix-cve-2024-22120-audit-log-is-the-read-primitive 2026-05-13T17:09:09.115Z yearly 0.7 https://nefariousplan.com/posts/airflow-aws-saml-poc-tests-wrong-endpoint 2026-05-11T17:11:43.921Z yearly 0.7 https://nefariousplan.com/posts/nginx-ui-backup-signature-key-on-the-request 2026-05-09T14:53:36.805Z yearly 0.7 https://nefariousplan.com/posts/apache-h2-spurge-was-an-ihash 2026-05-09T14:41:01.603Z yearly 0.7 https://nefariousplan.com/posts/dirty-frag-patched-half-ubuntu-already-mitigates 2026-05-09T14:31:35.902Z yearly 0.7 https://nefariousplan.com/posts/dirty-frag-tcp-set-the-flag-udp-did-not 2026-05-09T14:24:49.639Z yearly 0.7 https://nefariousplan.com/posts/rengine-cve-2023-50094-is-a-drawer 2026-05-08T17:00:09.503Z yearly 0.7 https://nefariousplan.com/posts/marimo-terminal-ws-only-websocket-without-the-check 2026-05-07T17:09:52.039Z yearly 0.7 https://nefariousplan.com/posts/dotnetnuke-cve-2017-9822-deserializer-still-public 2026-05-06T17:08:00.265Z yearly 0.7 https://nefariousplan.com/posts/tandoor-recipes-bleach-is-not-a-jinja-sandbox 2026-05-05T17:02:59.386Z yearly 0.7 https://nefariousplan.com/posts/restropress-token-is-issued-not-forged 2026-05-03T17:03:19.718Z yearly 0.7 https://nefariousplan.com/posts/cpanel-session-file-is-a-bus 2026-05-02T14:51:10.290Z yearly 0.7 https://nefariousplan.com/posts/linux-copyfail-cve-2026-31431-the-bug-is-not-in-authencesn 2026-05-02T14:48:24.156Z yearly 0.7 https://nefariousplan.com/posts/github-rails-env-is-a-header-field 2026-05-02T14:18:21.679Z yearly 0.7 https://nefariousplan.com/posts/fortimanager-get-auth-does-not-authenticate 2026-04-30T17:04:41.198Z yearly 0.7 https://nefariousplan.com/posts/checkmarx-kics-scanner-ran-so-did-their-code 2026-04-28T20:17:03.064Z yearly 0.7 https://nefariousplan.com/posts/ruby-saml-signature-verified-wrong-digest 2026-04-28T17:05:55.541Z yearly 0.7 https://nefariousplan.com/posts/lenovo-lde-junction-preemption 2026-04-27T17:13:25.909Z yearly 0.7 https://nefariousplan.com/posts/breeze-cache-cve-2026-3844-gravatar-fetcher-fetched-anything 2026-04-26T16:13:13.813Z yearly 0.7 https://nefariousplan.com/posts/packagekit-cve-2026-41651-polkit-authorized-the-slot 2026-04-26T14:23:48.449Z yearly 0.7 https://nefariousplan.com/posts/runpaperclip-cve-2026-41679-silent-no-op 2026-04-26T05:44:47.774Z yearly 0.7 https://nefariousplan.com/posts/composer-perforce-synccodebase-injection 2026-04-25T17:03:27.112Z yearly 0.7 https://nefariousplan.com/posts/adobe-acrobat-cve-2026-34621-detection-lie 2026-04-23T17:55:39.337Z yearly 0.7 https://nefariousplan.com/posts/pix-woocommerce-nonce-is-not-auth 2026-04-22T17:10:49.605Z yearly 0.7 https://nefariousplan.com/posts/tomcat-encryptinterceptor-fails-open 2026-04-21T04:02:06.750Z yearly 0.7 https://nefariousplan.com/posts/fortisandbox-cve-2026-39808-unauth-rce 2026-04-19T18:43:55.937Z yearly 0.7 https://nefariousplan.com/posts/adobe-acrobat-cve-2026-34621-pdf-weaponizer 2026-04-19T18:43:55.808Z yearly 0.7 https://nefariousplan.com/posts/bluhammer 2026-04-19T18:43:55.697Z yearly 0.7 https://nefariousplan.com/posts/undefend 2026-04-19T18:43:55.601Z yearly 0.7 https://nefariousplan.com/posts/the-trust-inversion 2026-04-19T18:43:55.488Z yearly 0.7 https://nefariousplan.com/posts/redsun-windows-defender-system-write 2026-04-19T18:43:55.348Z yearly 0.7 https://nefariousplan.com/posts/sap-netweaver-cvss-10-upload-to-webroot 2026-04-19T18:43:55.206Z yearly 0.7 https://nefariousplan.com/posts/axios-sapphire-sleet-70-million-installs 2026-04-19T18:43:55.074Z yearly 0.7 https://nefariousplan.com/posts/teampcp-they-came-for-the-scanners 2026-04-19T18:43:54.683Z yearly 0.7 https://nefariousplan.com/posts/oracle-cloud-the-breach-they-technically-didnt-deny 2026-04-19T18:43:54.583Z yearly 0.7 https://nefariousplan.com/posts/prompt-injection-is-a-supply-chain-attack 2026-04-19T18:43:54.464Z yearly 0.7 https://nefariousplan.com/posts/mcp-servers-the-new-npm-left-pad 2026-04-19T18:43:54.304Z yearly 0.7 https://nefariousplan.com/posts/shai-hulud-the-npm-worm 2026-04-19T18:43:54.192Z yearly 0.7 https://nefariousplan.com/posts/xrpl-npm-the-official-package-was-the-threat 2026-04-19T18:43:54.092Z yearly 0.7 https://nefariousplan.com/posts/clfs-ransomwares-favorite-kernel-driver 2026-04-19T18:43:53.985Z yearly 0.7 https://nefariousplan.com/posts/crushftp-pre-auth-mft-is-the-target 2026-04-19T18:43:53.873Z yearly 0.7 https://nefariousplan.com/posts/tj-actions-mutable-tags-were-always-a-lie 2026-04-19T18:43:53.726Z yearly 0.7 https://nefariousplan.com/posts/bybit-safe-ui-poisoning-fifteen-hundred-million 2026-04-19T18:43:53.625Z yearly 0.7 https://nefariousplan.com/posts/ivanti-the-vulnerability-subscription 2026-04-19T18:43:53.322Z yearly 0.7 https://nefariousplan.com/patterns/design-debt-driver 2026-04-19T18:33:52.781Z monthly 0.6 https://nefariousplan.com/patterns/unpatchable-primitive 2026-04-19T18:33:56.307Z monthly 0.6 https://nefariousplan.com/patterns/content-is-command 2026-04-19T18:33:52.096Z monthly 0.6 https://nefariousplan.com/patterns/trust-inversion 2026-04-19T18:33:07.325Z monthly 0.6 https://nefariousplan.com/patterns/todo-that-shipped 2026-04-19T18:33:55.925Z monthly 0.6 https://nefariousplan.com/patterns/the-detector-is-the-target 2026-04-19T18:33:55.736Z monthly 0.6 https://nefariousplan.com/patterns/unauth-write-to-execution-path 2026-04-19T18:33:56.136Z monthly 0.6 https://nefariousplan.com/patterns/disclosure-after-exploitation 2026-04-19T18:33:53.198Z monthly 0.6 https://nefariousplan.com/patterns/fail-open-intercept 2026-04-19T18:33:53.603Z monthly 0.6 https://nefariousplan.com/patterns/nonce-is-not-auth 2026-04-19T18:33:54.521Z monthly 0.6 https://nefariousplan.com/patterns/security-tool-as-primitive 2026-04-19T18:33:55.193Z monthly 0.6 https://nefariousplan.com/patterns/emergent-primitive 2026-04-19T18:33:53.423Z monthly 0.6 https://nefariousplan.com/patterns/disclaimer-wrapped-campaign-kit 2026-04-19T18:33:52.961Z monthly 0.6 https://nefariousplan.com/patterns/denial-by-pedantry 2026-04-19T18:33:52.491Z monthly 0.6 https://nefariousplan.com/patterns/maintainer-account-compromise 2026-04-19T18:33:53.897Z monthly 0.6 https://nefariousplan.com/patterns/revocation-gap 2026-04-19T18:34:31.668Z monthly 0.6 https://nefariousplan.com/patterns/idle-indistinguishable-from-broken 2026-04-26T06:20:36.977Z monthly 0.6 https://nefariousplan.com/patterns/mft-as-primary-target 2026-04-19T18:33:54.123Z monthly 0.6 https://nefariousplan.com/patterns/mutable-reference-as-immutable 2026-04-19T18:33:54.342Z monthly 0.6 https://nefariousplan.com/patterns/self-propagating-supply-chain 2026-04-19T18:33:55.351Z monthly 0.6 https://nefariousplan.com/patterns/commented-out-code-is-testimony 2026-04-19T18:33:51.816Z monthly 0.6 https://nefariousplan.com/patterns/junction-preemption 2026-04-22T03:28:49.987Z monthly 0.6 https://nefariousplan.com/patterns/persistent-blindspot 2026-04-19T18:33:54.736Z monthly 0.6 https://nefariousplan.com/patterns/prototype-pollution-trust-bypass 2026-04-19T18:33:54.909Z monthly 0.6 https://nefariousplan.com/patterns/security-metric-theater 2026-04-22T04:05:18.088Z monthly 0.6 https://nefariousplan.com/patterns/toctou-that-isnt 2026-04-22T04:05:12.686Z monthly 0.6 https://nefariousplan.com/patterns/auth-pins-the-slot-not-the-value 2026-04-26T14:41:35.660Z monthly 0.6 https://nefariousplan.com/patterns/signing-surface-poisoning 2026-04-19T18:33:55.538Z monthly 0.6 https://nefariousplan.com/patterns/unsigned-ecosystem-echo 2026-04-19T18:33:56.544Z monthly 0.6