| Date | Title | Scope |
|---|---|---|
| 2026-05-25 | I'm kind of a ghost 👻 | 12 ghost CVEs across 15 years of XSAs (580 CVEs audited) |
| 2026-05-08 | XSA-489: the vendors' response | 5 CVEs patched, 84 unaddressed, 0 credit given |
| 2026-04-24 | 89 CVEs in XAPI | Systematic audit of every writable Map(String, String) field |