← All credits
Bartlomiej Dmitruk at striga.ai
10 vulnerability records and advisories credit this contributor.
CVE-2026-82894
Apache OFBiz: Content renderer runs a service name stored on the row
CVE-2026-82907
Apache OFBiz: externalLoginKey honoured pre-auth, reusable and unbound
CVE-2026-82910
Apache OFBiz: renderLink compiles link parameters as FreeMarker source
CVE-2026-82912
Apache OFBiz: Unsandboxed Groovy compiled from a service parameter
CVE-2026-71901
Apache OFBiz: Dispatch arbitrary internal services on SFA component
CVE-2026-82916
Apache OFBiz: webtools xmldsdump exports any entity to any path
CVE-2026-82904
Apache OFBiz: Unbounded multi-form row count from a parameter name
CVE-2026-82902
Apache OFBiz: Unfiltered server-side URL fetch in webtools viewdatafile
CVE-2026-56153
Apache HTTP Server: mod_charset_lite: Heap overflow in finish_partial_char
CVE-2026-34486
Apache Tomcat: Fix for CVE-2026-29146 allowed bypass of EncryptInterceptor