← All credits
Wanxin Yin
7 vulnerability records and advisories credit this contributor.
CVE-2026-74756
Apache James: WebAdmin exposed without authentication on official Docker default
CVE-2026-108823
Apache Kylin: Potential unauthenticated job metadata replacement
CVE-2026-105931
Apache Pulsar: Missing authorization on transaction admin endpoints exposes transaction coordinator and transaction statistics of other tenants
CVE-2026-108771
Apache Kylin: unauthenticated broadcast API and polymorphic deserialization
CVE-2026-68573
Apache Kylin: Unauthenticated Metastore Cleanup
CVE-2026-107460
Apache Fesod (Incubating): UrlImageConverter SSRF protection bypass via DNS rebinding
CVE-2026-71895
Apache DolphinScheduler: Missing Authorization Checks Allow Non-Admin Users to Retrieve Kubernetes Credentials