Blog

• CVE-2026-123198: How an SSTI in LMFDB, Led to Unauthenticated Remote Code Execution

  Here's how our pyspector-monitor pipeline found an unauthenticated Server-Side Template Injection in LMFDB that led to unauthenticated Remote Code Execution on their live production server

• CVE-2026-120250: How Missing TLS Verification, Exposed OpenAlgo’s SMTP Credentials

  Here's how our pyspector-monitor pipeline found a disabled TLS certificate check in OpenAlgo's SMTP code, leading to MiTM attacks

• Introducing Satori CI

  Automating Testing, Security, and Collaboration