← All credits

Zachariah Mithani

31 vulnerability records and advisories credit this contributor.

CVE-2026-111172

@casl/ability 6.7.5 before 7.0.2 Prototype Pollution via rulesToFields setByPath

CVE-2026-111171

Web3.py 7.15.0 through 7.16.0 and 8.0.0b2 through 8.0.0 CCIP-Read SSRF Bypass

CVE-2026-110650

Thumbnail through 1.5 OS Command Injection via generate_thumbnail File Paths

CVE-2026-110645

Video-stitch before 2.0.0-beta.1 OS Command Injection via concat() and cut()

CVE-2026-110647

Turnpress through 0.4.2 OS Command Injection via Crafted .docx File Names

CVE-2026-110642

xhtml2pdf before 0.2.19 OS Command Injection via startViewer File Name

CVE-2026-110637

buildebooks before 0.2.2 OS Command Injection via kindlegen EPUB File Name

CVE-2026-110649

Stills before 25.24.2 OS Command Injection via Media File Names

CVE-2026-110644

nodejs-whisper through 0.3.1 OS Command Injection via convertToWavType

CVE-2026-110639

@mborne/extract before 0.2.1 OS Command Injection via archivePath and targetDir