Skip to content
View itulo's full-sized avatar
1 follower · 0 following

Achievements

Achievement: YOLO

Achievements

Achievement: YOLO

Block or report itulo

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
itulo/README.md

Hi, I'm Italo

Software engineer in Finland.

Security fixes I've contributed

Fixes for publicly reported issues in open-source projects:

  • Majorfi/immich-places#70 (merged): bump Next.js to 16.4.1 and pin the Docker images to Node.js 22.23.4 to pick up fixes for known CVEs in Next.js, Node.js and its bundled tar.
  • depado/goploader#509 (open): serve uploaded files with a safe Content-Type and nosniff, so an uploaded HTML file can't run on the site's origin.
  • cupcakearmy/cryptgeon#226 (open): stop CLI downloads from writing outside the working directory through names like ../x.
  • adam-rms/adam-rms#1055 (open): escape audit log action data to prevent stored XSS in the server audit log.
  • UpCloudLtd/upcloud-csi#137 (open): build with Go 1.26.10 to pick up the crypto/x509 fix for CVE-2026-111943.
  • Koenkk/zigbee2mqtt#33545 (open): restrict device icon uploads to image extensions so the file can't be written outside device_icons.

Projects

  • fixdossier: a free, MIT-licensed GitHub Action that turns a repo's published security advisories and fix history into a dated record of which release shipped each security fix. Docs · Sample records

Popular repositories Loading

  1. telegram_bot_logger telegram_bot_logger Public

    A bot for Telegram that automatically logs all messages from a channel/group into a database

    Python 5 2

  2. vaffapp vaffapp Public

    Codebase of the android app VaffApp

    Java 1 1

  3. kalman_filter_eigen kalman_filter_eigen Public

    Track car state with Kalman Filter using Eigen libraries

    C++ 1 2

  4. crypto_manager crypto_manager Public

    Java 1 7

  5. calculator calculator Public

    Calculator built with Ember and Flame.js

    JavaScript

  6. hitaskotiscraper hitaskotiscraper Public

    Scrape hitaskoti.fi and send a telegram message when a new house advertisement comes out

    Java