41554 blogs · [ { "id": "01a087aa-63d5-7374-a2b3-a7cdfe9f447e", "title": "Every version of Scratch is vulnerable to arbitrary code execution", "url": "https://muffin.ink/blog/scratch-vulnerability-disclosure/", "published_at": "2026-04-23T00:00:00+00:00" }, { "id": "01a087aa-63d5-7374-a2b3-a7cdff36b39e", "title": "The woes of sanitizing SVGs", "url": "https://muffin.ink/blog/scratch-svg-sanitization/", "published_at": "2026-04-11T00:00:00+00:00" }, { "id": "01a087aa-63d5-7374-a2b3-a7cdffe98a4f", "title": "The Blocklive malware incident (2024)", "url": "https://muffin.ink/blog/the-blocklive-malware-incident/", "published_at": "2026-03-30T00:00:00+00:00" }, { "id": "01a087aa-63d5-7374-a2b3-a7ce00c10b27", "title": "Paper.js XSS", "url": "https://muffin.ink/blog/paperjs-xss/", "published_at": "2026-03-27T00:00:00+00:00" }, { "id": "01a087aa-63d5-7374-a2b3-a7ce017922b0", "title": "Migadu email review", "url": "https://muffin.ink/blog/migadu-review/", "published_at": "2026-03-14T00:00:00+00:00" }, { "id": "01a087aa-63d5-7374-a2b3-a7ce01b26c85", "title": "A tale of two Electron apps", "url": "https://muffin.ink/blog/a-tale-of-two-electron-apps/", "published_at": "2026-03-01T00:00:00+00:00" }, { "id": "01a087aa-63d5-7374-a2b3-a7ce0266720c", "title": "MinneHack 2026 CTF puzzles and solutions", "url": "https://muffin.ink/blog/minnehack-ctf-2026/", "published_at": "2026-02-20T00:00:00+00:00" }, { "id": "01a087aa-63d5-7374-a2b3-a7ce02f18a8f", "title": "Bananatron and the disappointing state of Electron app security", "url": "https://muffin.ink/blog/bananatron/", "published_at": "2025-04-12T00:00:00+00:00" } ] posts Claim your blog

Blog · corpus.blog/blogs/muffin.ink/posts