← All credits

Claude Security

45 vulnerability records and advisories credit this contributor.

CVE-2026-105111

Apache Commons BCEL: Class2HTML emits unescaped class strings, enabling stored XSS

CVE-2026-103878

Apache Directory LDAP API: Injection of plaintext responses during StartTLS

CVE-2026-103880

Apache Directory LDAP API: Denial of service via excessive bcrypt cost factor in stored passwords

CVE-2026-102731

Apache Directory LDAP API: Denial of service via excessive memory allocation in BER decode

CVE-2026-103552

Apache Directory LDAP API: A unbound client can send a deeply nested search filter that overflows the stack in the server's decoder