← All credits
Yu Sun
29 vulnerability records and advisories credit this contributor.
CVE-2026-66004
BlenderMCP Path Traversal via download_polyhaven_asset API
CVE-2026-65010
Datasets Symlink-following Arbitrary File Write via Extractor.extract()
CVE-2026-49948
Mem0 0.2.8 Missing Authorization via POST /configure Endpoint
CVE-2026-11416
MoviePilot Path Traversal via Cloud Storage Download Handlers
CVE-2026-49136
Banana Slides 0.4.0 Path Traversal via generate_image() in ai_service.py
CVE-2026-49121
AI Tensor Engine for ROCm (AITER) 0.1.14 Unauthenticated RCE via MessageQueue.recv() Pickle Deserialization
CVE-2026-43624
F5-TTS 1.1.20 Path Traversal via finetune_gradio.py create_data_project()
CVE-2026-10108
xiaomusic 0.5.7 Path Traversal via GET /music endpoint
CVE-2026-10107
MoviePilot v2 SSRF via /api/v1/system/img/{proxy} Endpoint
CVE-2026-10099
XX-Net V5.16.6 WebSocket Frame Parsing Data Corruption via simple_http_server.py