← All credits

Jordan Harband (ljharb)

2 vulnerability records and advisories credit this contributor.

CVE-2026-12171
auto-changelog: code execution via untrusted in-repository configuration (handlebarsSetup/plugins), plus argument injection, path traversal, and SSRF
CVE-2026-102414
pbkdf2 rehashes long passwords on every iteration, enabling denial of service