← All credits
EQSTLab
12 vulnerability records and advisories credit this contributor.
CVE-2026-101062
Obot before v0.23.0 Authentication Bypass via OAuth Dynamic Client Registration
CVE-2026-101059
utcp-http before 1.1.4 OAuth2 tokenUrl Trust Boundary Bypass
CVE-2026-101058
python-utcp before 1.1.12 SSRF via Remote HTTP Manual
CVE-2026-90933
laradashboard through 1.2.2 Missing Authorization via License API
CVE-2026-85124
@fastify/http-proxy vulnerable to prefix escape via backslash dot-segments
CVE-2026-75759
Encrypted ID token or JARM response accepted without a nested signature in erlef oidcc
CVE-2026-65633
Purpose-limited JWT accepted as full bearer authentication in AshAuthentication
CVE-2026-16231
hbs vulnerable to XSS via registerAsyncHelper output-escaping bypass
CVE-2026-76225
ArcadeDB before 26.8.1 Server-Side Request Forgery via LOAD CSV
CVE-2026-64623
Network-AI before 5.13.4 Cryptographic Signature Verification Bypass