← All credits

de3erve

2 vulnerability records and advisories credit this contributor.

Cross-repository IDOR in issue-dependency removal lets an attacker tamper with and comment on private repos they cannot access

Team-repository linking endpoint bypasses the RepoAdminChangeTeamAccess organization setting