WireGuard

The vulnerabilities let a user already authorized over Tailscale SSH act beyond their configured local user. Fixes are built and in testing, and in the meantime Tailscale suggests setting TS_SSH_DISABLE_FORWARDING=1 in the tailscaled environment, which it says mitigates several serious findings.

A former Tailscale employee in the thread narrowed who is exposed.

In today’s GitHub Trending: Immich (self-hosted photo and video management), Tailscale (WireGuard networking), microservices-demo (a Kubernetes and Istio sample), awesome-systematic-trading (quant-trading resources), and Awesome Lists (SOC/CERT references).

The surprise is that the most useful entries are not competing products. They are working systems and maps of accumulated practice, where adoption depends on clarity, maintenance, and the limits the community has already found.