← All credits

Tan-JunWei

5 vulnerability records and advisories credit this contributor.

CVE-2026-116801

Parse Server 9.0.0 before 9.10.5-alpha.6 ACL Bypass via $relatedTo Query

CVE-2026-111919

Vikunja 0.22.0 before 2.7.0 Improper Access Revocation via Webhooks

CVE-2026-111918

Vikunja 1.0.0-rc0 before 2.7.0 Cross-Tenant Task Position Writes via Saved Filter Creation

CVE-2026-111917

Vikunja 2.3.0 before 2.7.0 WebSocket Authentication Ignores Session Revocation

CVE-2026-111386

Nezha 1.7.0 before 2.3.15 Cross-Tenant Server-ID Enumeration via getServerConfig