← All credits
Stan Ulbrych
4 vulnerability records and advisories credit this contributor.
CVE-2026-6100
Use-after-free in lzma.LZMADecompressor, bz2.BZ2Decompressor, and gzip.GzipFile after re-use under memory pressure
CVE-2026-4786
Incomplete mitigation of CVE-2026-4519, %action expansion for command injection to webbrowser.open()
CVE-2026-4224
Stack overflow parsing XML with deeply nested DTD content models
CVE-2026-3644
Incomplete control character validation in http.cookies