← All credits
YU SUN
35 vulnerability records and advisories credit this contributor.
CVE-2026-49121
AI Tensor Engine for ROCm (AITER) 0.1.14 Unauthenticated RCE via MessageQueue.recv() Pickle Deserialization
CVE-2026-48545
Gradio < 6.15.0 Cookie Injection via Shared Proxy Client
CVE-2026-48544
Taipy 4.1.1 Path Traversal via ElementLibrary.get_resource()
CVE-2026-43624
F5-TTS 1.1.20 Path Traversal via finetune_gradio.py create_data_project()
CVE-2026-10108
xiaomusic 0.5.7 Path Traversal via GET /music endpoint
CVE-2026-10107
MoviePilot v2 SSRF via /api/v1/system/img/{proxy} Endpoint
CVE-2026-10105
agno 2.6.5 SQL Injection via ClickHouse delete_by_metadata()
CVE-2026-10099
XX-Net V5.16.6 WebSocket Frame Parsing Data Corruption via simple_http_server.py
CVE-2026-10044
ai-goofish-monitor Unauthenticated Arbitrary File Read via GET /api/prompts/
CVE-2026-10042
manga-image-translator RCE via Unsafe Pickle Deserialization in Share Model