Tested by scanning GitHub for a particular path traversal vulnerability in Node.js projects that’s been around since 2010, the tool identified 1,756 vulnerable projects, some described as ...

I used to assume some of these apps were open too, just because they had GitHub repos or felt community-driven. Turns out, that's not always the case. Here are seven apps that seem open, but aren’t.