Atlanta Public Schools has 2 boys, 2 girls, and 2 teams win a State Championship in Cross Country. A couple runners-up as well.
APS Weekly Newsletter -
"The first round of the GHSA football playoffs begins Friday night, and APS has five teams in the hunt for a state championship. Let's Go APS!"
APS Weekly Newsletter -
"The first round of the GHSA football playoffs begins Friday night, and APS has five teams in the hunt for a state championship. Let's Go APS!"
November 13, 2025 at 6:12 PM
Atlanta Public Schools has 2 boys, 2 girls, and 2 teams win a State Championship in Cross Country. A couple runners-up as well.
APS Weekly Newsletter -
"The first round of the GHSA football playoffs begins Friday night, and APS has five teams in the hunt for a state championship. Let's Go APS!"
APS Weekly Newsletter -
"The first round of the GHSA football playoffs begins Friday night, and APS has five teams in the hunt for a state championship. Let's Go APS!"
Multiple npm packages have been compromised by a shaihulud-style worm, including tanstack packages.
On 2026-05-11, between approximately 19:20 and 19:26 UTC, 84 malicious versions across 42 @tanstack/* packages were published to the npm registry.
On 2026-05-11, between approximately 19:20 and 19:26 UTC, 84 malicious versions across 42 @tanstack/* packages were published to the npm registry.
Vulnerability GHSA-g7cv-rxg3-hmpx | NPMSCan
Details, references, and analysis for vulnerability GHSA-g7cv-rxg3-hmpx in npm ecosystem.
npmscan.com
May 12, 2026 at 6:14 PM
Multiple npm packages have been compromised by a shaihulud-style worm, including tanstack packages.
On 2026-05-11, between approximately 19:20 and 19:26 UTC, 84 malicious versions across 42 @tanstack/* packages were published to the npm registry.
On 2026-05-11, between approximately 19:20 and 19:26 UTC, 84 malicious versions across 42 @tanstack/* packages were published to the npm registry.
That’s a first: GitHub’s Advisory Database (incorrectly) flags Puppeteer as malware. github.com/github/advis... We are no longer able to publish new releases.
Are there any GitHub or Microsoft folks here who can help escalate this?
Are there any GitHub or Microsoft folks here who can help escalate this?
False positives w.r.t. malware in Puppeteer: GHSA-grrc-v84p-qwv3 & GHSA-rvxm-vq55-8p53 · Issue #7684 · github/advisory-database
There seem to be two false positives that are affecting Puppeteer-related packages: @puppeteer/browsers is being flagged as malware in GHSA-grrc-v84p-qwv3. puppeteer-core is being flagged as malwar...
github.com
May 13, 2026 at 6:54 PM
That’s a first: GitHub’s Advisory Database (incorrectly) flags Puppeteer as malware. github.com/github/advis... We are no longer able to publish new releases.
Are there any GitHub or Microsoft folks here who can help escalate this?
Are there any GitHub or Microsoft folks here who can help escalate this?
#MotherNatureSong 7
#MusicChallenge
Kikagaku Moyo - Field of Tiger Lilies
youtube.com/watch?v=GhSa...
#MusicChallenge
Kikagaku Moyo - Field of Tiger Lilies
youtube.com/watch?v=GhSa...
Field of Tiger Lilies
YouTube video by Kikagaku Moyo - Topic
youtube.com
September 7, 2025 at 5:26 AM
#MotherNatureSong 7
#MusicChallenge
Kikagaku Moyo - Field of Tiger Lilies
youtube.com/watch?v=GhSa...
#MusicChallenge
Kikagaku Moyo - Field of Tiger Lilies
youtube.com/watch?v=GhSa...
GHSA already has a rule on this. This is nothing more than an attempt to target a vulnerable group of people to distract from what’s happening. 500,000 people were dropped from Medicaid and only ~4000 have enrolled in Pathways (a program already costing $58 million) 1/
Lt. Gov. Burt Jones wants the Georgia Senate to ban transgender girls from competing in women’s school sports next year. At a seaside retreat this week, House Speaker Jon Burns made clear a similar measure is atop his to-do list in 2025. #gapol
ajc.com/politics/pol...
ajc.com/politics/pol...
House Speaker Jon Burns wants to ban transgender girls from women's sports
Speaker Jon Burns told House Republicans there is "nothing more important" than ensuring girls compete on what he called a level playing field.
ajc.com
December 4, 2024 at 7:23 PM
GHSA already has a rule on this. This is nothing more than an attempt to target a vulnerable group of people to distract from what’s happening. 500,000 people were dropped from Medicaid and only ~4000 have enrolled in Pathways (a program already costing $58 million) 1/
Also PEPFAR
Also GHSA
Also GHC
Also GID
Also GHSA
Also GHC
Also GID
May 27, 2026 at 12:09 AM
Also PEPFAR
Also GHSA
Also GHC
Also GID
Also GHSA
Also GHC
Also GID
RCE in OpenCode (GHSA-632h-h47v-g4x4)
RCE in OpenCode (GHSA-632h-h47v-g4x4)
securitylabs.datadoghq.com
September 28, 2026 at 8:09 AM
RCE in OpenCode (GHSA-632h-h47v-g4x4)
With that said, that isn't me defending the use of meshtastic for serious purposes
![Crafting of specific NodeInfo packets overwrite any publicKey saved in the NodeDB
GHSA-95pq-gj5v-4fg2 published on Aug 16, 2025 by thebentern
Critical
Repeated Public/Private Keypairs
GHSA-gq7v-jr8c-mfr7 published on Jun 18, 2025 by jp-bennett
Critical
Command Injection in GitHub Action
GHSA-6mwm-v2vv-pp96 published on Jul 10, 2025 by garthvh
Moderate
Forged DMs with no PKC show up as encrypted
GHSA-377p-prwp-4hwf published last month by jp-bennett
Moderate
[Low Priority] - On linux-native hosts, the self-signed/generated TLS key material is world-readable.
GHSA-h79j-c836-5j74 published on Aug 2, 2025 by garthvh
Low
Incorrect handling of malformed packets leads to controlled buffer overflow
GHSA-33hw-xhfh-944r published on Apr 11, 2025 by thebentern
Critical
Unimplemented routing module reply causes crash
GHSA-4q84-546j-3mf5 published on Jul 10, 2025 by garthvh
Moderate
Forged packets (without PKI) over MQTT can show up in direct messages
GHSA-c967-qc39-3hf5 published on Feb 15, 2025 by thebentern
Moderate
Failure to check for packets from the broadcast address allows potential DDoS amplification attack
GHSA-xfmq-5j3j-vgv8 published on Nov 4, 2024 by thebentern
Moderate
Authentication/Authorization Bypass via MQTT
GHSA-vqcq-wjwx-7252 published on Sep 25, 2024 by thebentern
High](https://cdn.bsky.app/img/feed_thumbnail/plain/did:plc:m4hcx7fornr745oorfsvhslc/bafkreigh62pilu4ukgndf6bicmezupg2ogv7omrui7me5zxnkszus3gnsq)
January 27, 2026 at 6:19 PM
With that said, that isn't me defending the use of meshtastic for serious purposes
📌 RCE in OpenCode (GHSA-632h-h47v-g4x4) https://www.cyberhub.blog/article/32706-rce-in-opencode-ghsa-632h-h47v-g4x4
RCE in OpenCode (GHSA-632h-h47v-g4x4)
The Reddit post shares a link to a security article about a remote code execution (RCE) vulnerability in OpenCode. The article is published by Datadog Security Labs and discusses an OpenCode upgrade remote code execution issue. The post references the GitHub Security Advisory identifier GHSA-632h-h47v-g4x4.
www.cyberhub.blog
September 29, 2026 at 9:37 PM
📌 RCE in OpenCode (GHSA-632h-h47v-g4x4) https://www.cyberhub.blog/article/32706-rce-in-opencode-ghsa-632h-h47v-g4x4
Big games for both of our high schools tonight in the second round of the GHSA playoffs. The GPB sports broadcast should be fun. Plus, the local private school plays for an independent schools assoc state championship.
November 22, 2024 at 2:21 PM
Big games for both of our high schools tonight in the second round of the GHSA playoffs. The GPB sports broadcast should be fun. Plus, the local private school plays for an independent schools assoc state championship.
September 28, 2026 at 9:28 AM
https://github.com/advisories/GHSA-w293-vg96-wgc3
more like this: https://standup.thecompound.tech/sb/f56ivf
more like this: https://standup.thecompound.tech/sb/f56ivf
September 29, 2026 at 6:26 PM
https://github.com/advisories/GHSA-vcvr-r3jv-pc5j
more like this: https://standup.thecompound.tech/sb/b846g3
more like this: https://standup.thecompound.tech/sb/b846g3
September 30, 2026 at 2:58 PM
RCE in OpenCode (GHSA-632h-h47v-g4x4)
Discovering and exploiting a remote code execution vulnerability in OpenCode (GHSA-632h-h47v-g4x4) | Datadog Security Labs
Datadog Security Labs discovered GHSA-632h-h47v-g4x4, a vulnerability in OpenCode's upgrade endpoint that, under certain conditions, allowed malicious webpages to execute code on developers' machines.
securitylabs.datadoghq.com
September 28, 2026 at 7:28 AM
RCE in OpenCode (GHSA-632h-h47v-g4x4)
https://github.com/advisories/GHSA-9v7f-9g4p-ffgj
more like this: https://standup.thecompound.tech/sb/2rlxl4
more like this: https://standup.thecompound.tech/sb/2rlxl4
September 29, 2026 at 11:26 PM
Middle Georgia GHSA football region standings
streamthecreek.com/blog/ghsa-fo...
streamthecreek.com/blog/ghsa-fo...
Middle Georgia GHSA football region standings
Here are the high school football standings for the regions that include GHSA teams from Middle Georgia.
streamthecreek.com
September 26, 2026 at 2:25 AM
Middle Georgia GHSA football region standings
streamthecreek.com/blog/ghsa-fo...
streamthecreek.com/blog/ghsa-fo...
https://github.com/advisories/GHSA-qw65-cvwx-89v3
more like this: https://standup.thecompound.tech/sb/38e14u
more like this: https://standup.thecompound.tech/sb/38e14u
September 28, 2026 at 9:51 PM
The GHSA already bars trans students from participating in sports and is being fought in court. Using Georgia law to discriminate against an incredibly vulnerable group of children, while the court’s still out is a waste of time under the Gold Dome. #gapol
Lt. Gov. Burt Jones wants the Georgia Senate to ban transgender girls from competing in women’s school sports next year. At a seaside retreat this week, House Speaker Jon Burns made clear a similar measure is atop his to-do list in 2025. #gapol
ajc.com/politics/pol...
ajc.com/politics/pol...
House Speaker Jon Burns wants to ban transgender girls from women's sports
Speaker Jon Burns told House Republicans there is "nothing more important" than ensuring girls compete on what he called a level playing field.
ajc.com
December 4, 2024 at 12:58 PM
The GHSA already bars trans students from participating in sports and is being fought in court. Using Georgia law to discriminate against an incredibly vulnerable group of children, while the court’s still out is a waste of time under the Gold Dome. #gapol
“US pedestrian deaths in the 1st half of 2024 were up a ‘shocking’ 48% since 2014” says #GHSA
www.itsinternational.com/news/ghsa-la...
www.itsinternational.com/news/ghsa-la...
GHSA laments ‘staggering’ trend in US pedestrian deaths
Drivers killed 3,304 pedestrians in the first half of 2024
www.itsinternational.com
March 14, 2025 at 11:02 AM
“US pedestrian deaths in the 1st half of 2024 were up a ‘shocking’ 48% since 2014” says #GHSA
www.itsinternational.com/news/ghsa-la...
www.itsinternational.com/news/ghsa-la...
Datadog Security Labs disclosed GHSA-632h-h47v-g4x4 in OpenCode: a content-type confusion bug in /global/upgrade enabled remote code execution via a crafted cross-origin form and malicious npm tarball. Fixed in 1.18.22. #OpenCode #RCE #Datadog
Discovering And Exploiting A Remote Code Execution Vulnerability In OpenCode (GHSA-632h-h47v-g4x4)
Datadog Security Labs discovered GHSA-632h-h47v-g4x4 in OpenCode, where a content-type confusion bug in the /global/upgrade endpoint let attackers trigger remote code execution by serving a malicious npm tarball through a crafted cross-origin HTML form submission. OpenCode 1.18.22 fixes the issue, which affected versions 1.14.30 through 1.18.21 when installed via npm, pnpm, or Bun. #OpenCode #GHSA-632h-h47v-g4x4 #Anomaly #DatadogSecurityLabs
www.hendryadrian.com
September 25, 2026 at 2:15 AM
If you run Ember in production, do not wait on Scala Steward. Bump it today!
github.com/http4s/http4...
github.com/http4s/http4...
Release v0.23.38 · http4s/http4s
Security fixes
GHSA-jc8x-g44q-5x7j: CookieJar accepts public-suffix Domain attributes (e.g. Domain=.com), enabling cross-origin cookie injection
GHSA-674r-3w4m-554c: Server-Sent Events injection i...
github.com
September 29, 2026 at 8:45 PM
If you run Ember in production, do not wait on Scala Steward. Bump it today!
github.com/http4s/http4...
github.com/http4s/http4...
New Anubis prerelease dropped: github.com/TecharoHQ/an...
Release v1.26.0-pre1 · TecharoHQ/anubis
Sorry it's been so long between releases. Recovering from surgery sucks.
This release's title will be Papalymo Totolymo.
Patch GHSA-6wcg-mqvh-fcvg by containing subrequest logic to Anubis instance...
github.com
June 26, 2026 at 3:59 AM
New Anubis prerelease dropped: github.com/TecharoHQ/an...
The GHSA (gays, hispanics, south asians) delivering for Talarico tonight
March 4, 2026 at 1:50 AM
The GHSA (gays, hispanics, south asians) delivering for Talarico tonight