← All credits

kamil-sawicki

4 vulnerability records and advisories credit this contributor.

Unauthenticated webhook request with null notification entry could crash the Microsoft Calendar plugin.

Insufficient server-side validation of board member role fields permits privilege escalation

Public-only tokens bypass private-resource restrictions on `/api/v1/user` self routes

Gitea Actions Artifacts V4 signed URL HMAC ambiguity allows cross-repository artifact read and cross-task upload-state write