정준서 · Security Research & Product Engineering

LINUX KERNEL · AUTHORED PATCHES

• torvalds/linux · ef85bad39cf2ksmbd: reject FSCTL_SET_ZERO_DATA on a directory handle ↗

GITHUB · MERGED PRS 20

• aws-amplify/amplify-backendfix(create-amplify): exit quietly when a prompt is cancelled with ctrl+c ↗
• grafana/sigma-rule-deploymentAdd highest level template helper ↗
• grafana/sigma-rule-deploymentUse rule titles in deployment comments ↗
• grafana/pdc-agentssh: Parse Windows OpenSSH versions ↗
• medusajs/medusafix(product): delete individual variant metadata fields ↗
• Boeing/config-file-validatorfix(formatter): preserve JSON blank lines ↗
• cloudflare/circlinternal/test: unify ACVP test vector parsing ↗
• Eventual-Inc/Daftrefactor(io): migrate Delta Lake scans to DataSource ↗
• crossplane/clivalidate: Recognize Kubernetes built-in resources ↗
• objectionary/eo#5773: Fix printf byte format rewriting ↗
• Boeing/config-file-validatorfix(formatter): normalize JSON blank lines before closing delimiters ↗
• JanDeDobbeleer/oh-my-poshtest(prompt): remove cross-test global state dependencies ↗
• JanDeDobbeleer/oh-my-poshtest(serve): wait on records instead of wall-clock silence ↗
• openfga/dotnet-sdkfix: compare contextual tuples by value ↗
• updatecli/updateclifeat(gitcommit): add Git commit source resource ↗
• alpha-omega-security/scrutineerperf(worker): buffer scan log accumulation ↗
• open-telemetry/opentelemetry-helm-chartsfix(kube-stack): grant leader election lease RBAC ↗
• traefik/traefik-helm-chartfix(ports): support IPv6 hostIP values ↗
• dapr/daprfix: preserve sub-millisecond latency precision ↗
• grafana/docker-otel-lgtmfix: prevent interactive shutdown hangs ↗

GITLAB · MERGED MRS 15

• gitlab-org/cli !3551fix(cluster): distinguish missing manifests from read failures ↗
• gitlab-org/cli !3549fix(api): return client errors during placeholder expansion ↗
• gitlab-org/cli !3547fix(ci): paginate interactive job selection ↗
• gitlab-org/cli !3570fix(git): match the clone directory for a URL ending in .git/ ↗
• gitlab-org/cli !3569fix(stack): do not leak a file handle in AddStackBaseBranch ↗
• gitlab-org/cli !3568fix(git): recognize uppercase URL schemes when parsing remotes ↗
• gitlab-org/cli !3563fix(securefile): reject a file ID argument combined with --id or --name ↗
• gitlab-org/cli !3548fix(schedule): validate variables before creating a schedule ↗
• gitlab-org/cli !3540fix(deploy-key): require a key ID for delete ↗
• gitlab-org/cli !3556fix(config): report a local config file that cannot be parsed ↗
• gitlab-org/cli !3555fix(iostreams): treat a blank pager command as no pager ↗
• gitlab-org/cli !3544fix(milestone): return the base repository error instead of panicking ↗
• gitlab-org/cli !3541fix(ci): reject failed responses when linting a remote URL ↗
• gitlab-org/cli !3539test: keep command tests inside their temp directories on Windows ↗
• gitlab-org/cli !3545fix(ci): stop tracing a canceled job ↗

SELECTED PROJECTS

DESIGN EXPLORATIONS

WRITEUPS

WCSC OCTOBER 2026 CTF

1st place · 14개 챌린지(web, pwn, crypto, forensics, OSINT, blockchain) 풀이 기록

1st · 10475 ↗
TRAEFIK H2C UPGRADE

클라이언트가 선택한 h2c 업그레이드가 라우터 미들웨어를 우회해 보호된 경로로 터널을 만드는 문제

CVE-2026-88008 ↗
OPENCHOREO CLUSTER-GATEWAY

인증되지 않은 프록시가 연결된 모든 데이터 플레인에 CRUD 접근을 제공하는 문제

CVE-2026-73842 ↗

PAPERS