
Security News
Next.js Patches Critical Middleware Vulnerability (CVE-2025-29927)
Next.js has patched a critical vulnerability (CVE-2025-29927) that allowed attackers to bypass middleware-based authorization checks in self-hosted apps.
This utility synchronises spelling dictionaries from various tools with each other. This way the words that have been trained on MS Office are also correctly checked in vim or Firefox. And vice versa of course.
The initial supported tools are:
SpellSync accomplishes this work by reading all the stored words from all the dictionaries. It stores that dictionary in a central location. From there the individual app dictionaries are updated with the merged list.
SpellSync is created in Python and published on Python's PyPI. Installation in most cases is accomplished with the following command:
pip install spellsync
Once set up, you can do a dry-run of spellsync
with the following command:
spellsync -n
This will show how large the common dictionary will become, but no files are written.
To execute the sync in live mode, run without the -n
option:
spellsync
By default a backup of all spelling files is created in the spellsync
folder inside the XDG state home (default location is ~/.local/state/spellsync
). So if anything goes awry, you can use the backup files from there. The path to the dictionary files that are modified is output when the command is run, which should aid in finding out where the files would have to be moved back to.
Note that the backup folder is not cleaned out or rotated. So if you run the script regularly, the folder may grow too large. You can then either manually clear out old backup files (tmpwatch
may be helpful here) or you can disable the backup altogether:
spellsync --no-backup
FAQs
Synchronise personal spelling dictionaries across applications
We found that spellsync demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Next.js has patched a critical vulnerability (CVE-2025-29927) that allowed attackers to bypass middleware-based authorization checks in self-hosted apps.
Security News
A survey of 500 cybersecurity pros reveals high pay isn't enough—lack of growth and flexibility is driving attrition and risking organizational security.
Product
Socket, the leader in open source security, is now available on Google Cloud Marketplace for simplified procurement and enhanced protection against supply chain attacks.