← All credits
Harrison Healey
5 vulnerability records and advisories credit this contributor.
CVE-2025-14350
Information disclosure via channel mentions in posts
CVE-2023-35075
HTML injection via channel autocomplete
CVE-2023-1775
Unsanitized events sent over Websocket to regular users in a High Availability environment
CVE-2023-43754
Permalink previews displayed for posts in archived channels even if users are disallowed to view archived channels
CVE-2024-39807
Channel IDs of archived/restored channels leaked via webhook events