← All credits

William Pierson (Retro16)

8 vulnerability records and advisories credit this contributor.

Gravitee API Management through 4.12.22 Default JWT Secret Authentication Bypass

CVE-2026-109376

ERPNext 15.55.0 through 16.50.0 Incorrect Authorization via get_timesheet_html

CVE-2026-109377

ERPNext 9.0.0 through 16.50.0 Missing Authorization in Batch Lookup Methods

CVE-2026-107701

dot-access through 1.0.0 Prototype Pollution via set() path argument

CVE-2026-107699

ppt2png through 0.0.6 OS Command Injection via input and output paths

CVE-2026-107704

image_optimizer 1.3.0 through 1.9.0 OS Command Injection via identify_format

CVE-2026-107700

dot-access 0.0.3 through 1.0.0 Code Injection via get() Path Argument

CVE-2026-107703

@enmaso/node-convert through 1.0.0 OS Command Injection via filepath and convertTo