← All credits
Yu Sun
32 vulnerability records and advisories credit this contributor.
CVE-2026-82881
Aix-DB through 1.2.4 Stored Cross-Site Scripting via Markdown
CVE-2026-82880
YaCy Search Server through 1.941 XML External Entity Injection via Parsers
CVE-2026-82454
Omnivore before android-0.227.0 Authentication Bypass via Apple Sign-in
CVE-2026-79785
X-AnyLabeling before 4.0.0-beta.9 Improper Certificate Validation in Model Downloads
CVE-2026-72743
SQLBot 1.10.0 SQText Dashboard Component Stored XSS via v-html
CVE-2026-73031
telegram-search Stored XSS via v-html in MessageList.vue
CVE-2026-69117
NetBox 4.5.8 ORM Injection via WritableNestedSerializer
CVE-2026-48544
Taipy 4.1.1 Path Traversal via ElementLibrary.get_resource()
CVE-2026-10105
agno 2.6.5 SQL Injection via ClickHouse delete_by_metadata()
CVE-2026-73032
PapersGPT for Zotero 0.6.1 RCE via Unsanitized LLM Response eval()