← All credits
Thank you to [Kacper Leszczyński / szotgan](https://gitlab.com/szotgan) on GitLab for reporting this issue.
3 vulnerability records and advisories credit this contributor.
CVE-2026-90821
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Crafty Controller
CVE-2026-5652
Authorization Bypass Through User-Controlled Key in Crafty Controller
CVE-2025-5990
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Crafty Controller