← All credits
offset
51 vulnerability records and advisories credit this contributor.
CVE-2026-73603
Flowise before 3.1.4 Credential Abuse via Text-to-Speech
CVE-2026-73618
Budibase Server before 3.40.0 NoSQL Injection via JSON Parameter
CVE-2026-69094
Admidio before 5.0.11 IDOR via save_temporary mylist_function.php
CVE-2026-67311
Budibase before 3.38.1 SSRF Blacklist Bypass via HTTP Redirect
CVE-2026-64627
Parse Server 9.0.0 Schema Disclosure via GraphQL Variable Coercion
CVE-2026-65899
DOMPurify before 3.4.9 Trusted Types Policy State Contamination
CVE-2026-65911
DOMPurify before 3.4.0 XSS via ADD_ATTR/ADD_TAGS State Leakage
CVE-2026-65902
DOMPurify before 3.4.7 Hook Mutation Pollution via allowedTags
CVE-2026-56765
Vikunja - Unauthenticated Instance-Wide Data Breach via Link Share Hash Disclosure Chained with Cross-Project Attachment IDOR
CVE-2026-56268
Flowise - Cross-Workspace Information Disclosure via chatflows/apikey Endpoint