← All credits
Yu Sun
32 vulnerability records and advisories credit this contributor.
CVE-2026-10108
xiaomusic 0.5.7 Path Traversal via GET /music endpoint
CVE-2026-10107
MoviePilot v2 SSRF via /api/v1/system/img/{proxy} Endpoint
CVE-2026-10099
XX-Net V5.16.6 WebSocket Frame Parsing Data Corruption via simple_http_server.py
CVE-2026-10042
manga-image-translator RCE via Unsafe Pickle Deserialization in Share Model
CVE-2026-10044
ai-goofish-monitor Unauthenticated Arbitrary File Read via GET /api/prompts/
CVE-2026-61461
Dify < 1.16.0-rc1 SQL Injection via MyScale Vector Store search_by_full_text
CVE-2026-62239
FlashAttention Symlink Attack via tarfile.extractall in hopper/setup.py
CVE-2026-58473
Cognee < 1.2.0 Unauthorized LLM Configuration Overwrite via /api/v1/settings
CVE-2026-48545
Gradio < 6.15.0 Cookie Injection via Shared Proxy Client
CVE-2026-47119
Agent Zero < 1.15 Stored XSS via image_get API Endpoint