← All credits
offset
57 vulnerability records and advisories credit this contributor.
CVE-2026-64627
Parse Server 9.0.0 Schema Disclosure via GraphQL Variable Coercion
CVE-2026-73618
Budibase Server before 3.40.0 NoSQL Injection via JSON Parameter
CVE-2026-73603
Flowise before 3.1.4 Credential Abuse via Text-to-Speech
CVE-2026-115352
Mistune before 3.3.0 Quadratic-Time DoS via Unmatched Brackets in Inline Parser
CVE-2026-115353
Mistune before 3.3.0 Path Traversal via include Directive
CVE-2026-115351
Mistune 3.2.1 before 3.3.0 CSS Injection via Figure Directive figwidth Option
CVE-2026-115350
Mistune before 3.3.0 Stored XSS via Include Directive HTML Files
CVE-2026-110868
Renovate before 44.79.0 SSRF via HTTP Preset URLs and customDatasources
CVE-2026-109357
LibreNMS before 26.9.0 LDAP Filter Injection Authentication Bypass via Authorization Header
CVE-2026-90935
Froxlor before 2.3.7 Authorization Bypass via Mysqls.add API