← All credits

Mingkai Yu

42 vulnerability records and advisories credit this contributor.

CVE-2026-107205

LMCache through 0.5.5 Missing Authentication in MP Coordinator Fleet Control API

CVE-2026-107206

LMCache through 0.5.5 Missing Authentication in MP HTTP Server Management API

CVE-2026-106040

Mooncake Store through 0.3.13.post1 Missing Authorization via EvictDiskReplica RPC

CVE-2026-106041

Mooncake Store through 0.3.13.post1 Missing Authorization via NotifyOffloadSuccess RPC

CVE-2026-106037

Mooncake through 0.3.13.post1 Missing Authentication in Store REST Service

CVE-2026-106039

Mooncake Store through 0.3.13.post1 Missing Authorization in Replication Task RPC

CVE-2026-103761

Mooncake transfer engine through 0.3.13.post1 Memory Exhaustion via Unbounded Notify Queue

CVE-2026-104433

Mooncake before 0.3.12 Out-of-Bounds Read via P2P Handshake readString

CVE-2026-103765

Mooncake through 0.3.13.post1 Missing Authentication in HTTP Metadata Server

CVE-2026-103764

Mooncake transfer engine before 0.3.13 Unauthenticated Arbitrary Memory Read/Write via TCP Transport