Khashayar Fereidani
I'm a security researcher and software engineer working with Rust, Go, C, and JavaScript. I report vulnerabilities to help secure projects, and build highly-optimized software and tools for the problems I run into. The ones I enjoy most resist a quick answer and reward deep thinking and patient brainstorming. Beyond code, I write about philosophy, technology, and the ideas that shape how we build and think.
Latest Posts
View all →Latest Vulnerabilities
View all →- reportRust glib `PtrSlice::from` null pointer write2026-09-19
- reportRust glib `BoxedInline` slice heap overflow2026-09-19
- reportusvg SVGZ decompression bomb in `Tree::from_data`2026-09-18
- reportcrates.io `/svelte` middleware backslash open redirect2026-09-03
- reportPHP 8.5.7 `dom_xml_serialization_algorithm()` stack-overflow2026-06-18
Open Source Projects
View all →rust channel benchmarks to keep stat of performance of Kanal library in comparison with other competitors.
High-performance, lock-free local and concurrent object memory pool with automated allocation, cleanup, and verification.
A stack-based memory allocator with optional fallback to a global/secondary allocator.
Compare musl and glibc using repeatable compile + benchmark runs driven by Zig's C compiler frontend.