Khashayar Fereidani
I'm a security researcher and software engineer working with Rust, Go, C, and JavaScript. I report vulnerabilities to help projects security, and build highly-optimized software and tools for the problems I run into. Beyond code, I write about philosophy, technology, and the ideas that shape how we build and think.
Latest Posts
View all →Latest Vulnerabilities
View all →- reportPHP 8.5.7 `dom_xml_serialization_algorithm()` stack-overflow2026-06-18
- reportPHP 8.5.7 `levenshtein()` signed-integer overflow2026-06-18
- reportPHP 8.5.7 `mb_substr()` 'SJIS-mac' size_t underflow2026-06-18
- reportPHP 8.5.7 `FILTER_SANITIZE_ENCODED` uninitialized read2026-06-18
- reportJoomla 1.5.x to 3.4.5 Object Injection Exploit2015-12-31
Open Source Projects
View all →rust channel benchmarks to keep stat of performance of Kanal library in comparison with other competitors.
High-performance, lock-free local and concurrent object memory pool with automated allocation, cleanup, and verification.
A stack-based memory allocator with optional fallback to a global/secondary allocator.
An efficient hybrid wait queue futex designed for high-contention scenarios, supporting both synchronous and asynchronous waiting and notification. It supports notify and notify_many on all targets.