← All credits
tinyb0y
7 vulnerability records and advisories credit this contributor.
CVE-2026-68495
jackson-dataformats-binary: CBOR parser does not enforce StreamReadConstraints.maxNameLength, enabling memory-exhaustion denial of service
CVE-2026-68496
jackson-dataformats-binary: Smile parser does not enforce StreamReadConstraints.maxNameLength, enabling memory-exhaustion denial of service
CVE-2026-70410
Apache Calcite Avatica: Unrestricted class initialization when instantiating plugins
CVE-2026-76222
GitPython before 3.1.58 Path Traversal via .gitmodules Submodule Name
CVE-2026-19670
Incorrect Authorization in CISA Malcolm
CVE-2026-19671
Improper handling of highly compressed data (data amplification) in CISA Malcolm
CVE-2026-19135
OpenNMS JEXL sandbox bypass in Measurements REST API allows ROLE_USER to load arbitrary classes