← All credits
JFrog Security Research
5 vulnerability records and advisories credit this contributor.
CVE-2026-86242
Unauthenticated RCE via Custom Plugin HTTP Path on Dynamically Linked Builds
CVE-2026-82635
Pake arbitrary file write via unsanitized download_file filename
CVE-2026-17497
NoteGen arbitrary OS command execution via Tauri shell:allow-execute for bash/python
CVE-2026-17496
NoteGen chat preview XSS via unsanitized AI/skill HTML rendering
CVE-2026-17534
Kimi Code FetchURL SSRF protection bypass via DNS-resolving hostnames and redirects