← All credits
DavidCarliez
13 vulnerability records and advisories credit this contributor.
CVE-2026-121422
SurrealDB from 3.1.0 before 3.3.0 SSRF via JWKS Implicit Default Port Bypass
CVE-2026-114074
Trigger.dev before 4.5.10 Webhook SSRF Protection Bypass via 198.18.0.0/15 Range
CVE-2026-114082
Trigger.dev before 4.6.2 Overly Broad Realtime Session Stream Credentials
CVE-2026-72859
Budibase 3.39.4 before 3.40.0 Authorization Regression via S3 Presigned URL
CVE-2026-72855
Budibase before 3.40.0 DNS Rebinding SSRF via OpenAPI and REST
CVE-2026-58657
Grav - Stored CSS Injection via Markdown Image resize() Action
CVE-2026-101048
Cloudreve before 4.17.0 SSRF via Admin.Read OAuth scope
CVE-2026-101090
Nezha through 2.2.3 Host Header Injection via OAuth2 redirect_uri
CVE-2026-94382
Beszel before 0.19.0 Insecure Direct Object Reference via user-alerts
CVE-2026-91931
Flowise before 3.1.4 Remote Code Execution via Custom MCP npx