GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration
← All credits

Thank you to [Kacper Leszczyński / szotgan](https://gitlab.com/szotgan) on GitLab for reporting this issue.

2 vulnerability records and advisories credit this contributor.

CVE-2026-5652
Authorization Bypass Through User-Controlled Key in Crafty Controller
CVE-2025-5990
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Crafty Controller