← All credits
YU SUN
35 vulnerability records and advisories credit this contributor.
CVE-2026-73032
PapersGPT for Zotero 0.6.1 RCE via Unsanitized LLM Response eval()
CVE-2026-73031
telegram-search Stored XSS via v-html in MessageList.vue
CVE-2026-73030
unearth 0.18.2 Path Traversal via Unnormalized Paths and Symlink Escape
CVE-2026-72743
SQLBot 1.10.0 SQText Dashboard Component Stored XSS via v-html
CVE-2026-69117
NetBox 4.5.8 ORM Injection via WritableNestedSerializer
CVE-2026-69110
OpenCode Studio < 2.4.4 Unauthenticated File Read via /api/tmp and /api/music
CVE-2026-61461
Dify < 1.16.0-rc1 SQL Injection via MyScale Vector Store search_by_full_text
CVE-2026-58473
Cognee < 1.2.0 Unauthorized LLM Configuration Overwrite via /api/v1/settings
CVE-2026-49948
Mem0 0.2.8 Missing Authorization via POST /configure Endpoint
CVE-2026-49136
Banana Slides 0.4.0 Path Traversal via generate_image() in ai_service.py