Khashayar Fereidani
I'm a security researcher and software engineer working with Rust, Go, C, and JavaScript. I report vulnerabilities to help secure projects, and build highly-optimized software and tools for the problems I run into. The ones I enjoy most resist a quick answer and reward deep thinking and patient brainstorming. Beyond code, I write about philosophy, technology, and the ideas that shape how we build and think.
Latest Posts
View all →Latest Vulnerabilities
View all →- reportmistral.rs UI unauthenticated chat-id path traversal2026-09-25
- reportharness Gitspace hardcoded password for every user account2026-09-24
- reportnps cleartext secrets, unsalted MD5 tunnel keys, and timing-unsafe compares2026-09-24
- reportdive tar-slip in image file extraction2026-09-24
- reportharness registry webhook sort_order blind SQL injection2026-09-24
Open Source Projects
View all →rust channel benchmarks to keep stat of performance of Kanal library in comparison with other competitors.
High-performance, lock-free local and concurrent object memory pool with automated allocation, cleanup, and verification.
Fast no_std stack allocator and bump allocator for Rust. Allocate Vec, Box, and HashMap from a fixed-size buffer on the stack or in a static with zero heap allocations, or fall back to the heap when the buffer runs out.
Compare musl and glibc using repeatable compile + benchmark runs driven by Zig's C compiler frontend.