← All credits

Red Hat would like to thank Arpit Jain (independent security researcher) for reporting this issue.

2 vulnerability records and advisories credit this contributor.

CVE-2026-79717
Galaxy_ng: galaxy_ng: blind ssrf via namespace avatar_url with no private-address restriction
CVE-2026-107151
Rubygem-smart_proxy_dynflow: task update and done callbacks accept unauthenticated requests