← All credits
sec-reex
5 vulnerability records and advisories credit this contributor.
CVE-2026-82241
Budibase backend-core SSRF via incomplete default blacklist
CVE-2026-58440
Webhooks created by a collaborator keep firing after their repo access is revoked → ongoing real-time exfiltration of private repo content (incomplete revocation cleanup in `DeleteCollaboration`)
CVE-2026-64622
Network-AI 5.12.2 through 5.13.3 Missing Authorization via ApprovalInbox
CVE-2026-65604
Skipper Incomplete Fix for CVE-2026-50197 Policy Bypass
CVE-2026-65607
SiYuan before v3.7.2 Path Traversal via /export/temp/