Arbitrary File Deletion in uv via RECORD Entries
uv was published with a low severity advisory for arbitrary file deletion through crafted RECORD entries during uninstall.
Hi, I am
I'm a Full Stack Web Developer with expertise in both frontend and backend technologies. I have experience working on web applications for agricultural management, security bug bounty hunting, and freelance web development projects. My skills span PHP, Laravel, MySQL, HTML, Tailwind, as well as modern web technologies.

My professional journey
Technologies I work with
Some things I've built

A web application for managing the detasseling process in corn production, allowing users to track and optimize their workflows.

A web application for managing vehicle fleets, allowing users to track vehicle status, maintenance schedules, and driver assignments.
Security disclosures and research findings
uv was published with a low severity advisory for arbitrary file deletion through crafted RECORD entries during uninstall.
Rack's greedy multipart boundary parsing can cause parser differentials and WAF bypass scenarios.
n8n has a high severity SQL injection in the Data Table node via the orderByColumn expression.
Let's work together
Feel free to reach out for collaborations, freelance projects, or full-time opportunities. I'd be happy to hear from you. Fill out the form or contact me directly via email to connect.
Email me at
alacambradev@gmail.com
Based in
Pangasinan, Philippines