← All credits
Alex Gaynor in collaboration with Claude and Anthropic Research
29 vulnerability records and advisories credit this contributor.
CVE-2026-59651
BKS keystore accepts legacy version with 16-bit integrity MAC key
CVE-2026-59652
LDAP filter injection in legacy jdk1.4 LDAPStoreHelper
CVE-2026-15055
PKCS#8 / PBES2 decryptors honour unbounded KDF cost from input
CVE-2026-59643
OpenPGP inline-signature policy failures silently ignored
CVE-2026-59642
CMS AuthenticatedData content not bound to MAC when authAttrs present
CVE-2026-59641
S/MIME validator trusts signer-asserted signingTime for path validation
CVE-2026-59640
OpenPGP CFB quick-check oracle active on symmetric/session-key paths
CVE-2026-59639
CMS verifySignatures returns true for SignedData with zero signers
CVE-2026-59638
JSSE hostname verifier CN-fallback enabled by default despite documented opt-in