← All credits
h1ei1
7 vulnerability records and advisories credit this contributor.
CVE-2026-80353
Apache Tomcat: TOCTOU when setting specific permissions for Unix Domain Sockets - Fix for CVE-2026-65183 did not address APR connector
CVE-2026-88900
Apache Camel: Camel-JGroups: Unsafe Java Deserialization of Cluster Messages in the JGroups Consumer Can Lead to Remote Code Execution
CVE-2026-88901
Apache Camel: Camel-Smooks XML External Entity Processing, external entities resolved by default
CVE-2026-66087
Apache DolphinScheduler: Project Authorization Bypass in the Task instance stop/savepoint Endpoint
CVE-2026-66084
Apache DolphinScheduler: Project Authorization Bypass in the Task Definition with-upstream Endpoint
CVE-2026-71895
Apache DolphinScheduler: Missing Authorization Checks Allow Non-Admin Users to Retrieve Kubernetes Credentials
CVE-2026-81866
Apache NiFi: Missing Authorization for Assets and Secrets Referenced by Connector Configuration