← All credits
Yu Sun
35 vulnerability records and advisories credit this contributor.
CVE-2026-10107
MoviePilot v2 SSRF via /api/v1/system/img/{proxy} Endpoint
CVE-2026-10099
XX-Net V5.16.6 WebSocket Frame Parsing Data Corruption via simple_http_server.py
CVE-2026-10044
ai-goofish-monitor Unauthenticated Arbitrary File Read via GET /api/prompts/
CVE-2026-10042
manga-image-translator RCE via Unsafe Pickle Deserialization in Share Model
CVE-2026-11416
MoviePilot Path Traversal via Cloud Storage Download Handlers