# Posts by tag 'cve' — Liran Tal

AI security researcher, open-source maintainer, and author. Explore Liran Tal’s blog, research papers, developer tools, books, and conference talks.

Canonical: https://lirantal.com/tag/cve

[![](/_astro/photo-1516849677043-ef67c9557e16.fC1eXFFa_3H0Yw.jpg)

Apr 27, 2023 2 min read

### Disclosing a local file inclusion vulnerability in xmlhttprequest library

I found a Local File Inclusion (LFI) security vulnerability in xmlhttprequest library but it's still unfixed.](/blog/local-file-inclusion-in-xmlhttprequest-library)

*   [security](/tag/security)
*   [vulnerability](/tag/vulnerability)
*   [advisory](/tag/advisory)
*   [cve](/tag/cve)
*   [xmlhttprequest](/tag/xmlhttprequest)
*   [local-file-inclusion](/tag/local-file-inclusion)
*   [lfi](/tag/lfi)

 [![](/_astro/photo-1553987084-4c3aebbc686e.DpeFAG9W_Z1fvFtg.jpg)

Apr 16, 2023 3 min read

### Disclosing uncontrolled resource consumption in xmlhttprequest library

proof-of-concept showing a denial of service vulnerability in a Node.js web server if it uses the xmlhttprequest library to make outgoing HTTP requests](/blog/disclosing-uncontrolled-resource-consumption-in-xmlhttprequest-library)

*   [security](/tag/security)
*   [vulnerability](/tag/vulnerability)
*   [advisory](/tag/advisory)
*   [cve](/tag/cve)
*   [xmlhttprequest](/tag/xmlhttprequest)
*   [denial of service](/tag/denial-of-service)
*   [dos](/tag/dos)
*   [uncontrolled resource consumption](/tag/uncontrolled-resource-consumption)