← All credits

kemrec

8 vulnerability records and advisories credit this contributor.

CVE-2026-124422

SunEditor 3.0.0 before 3.4.0 Stored XSS via html.clean() Iframe Placeholder

CVE-2026-118675

n8n before 1.123.85, 2.43.5, and 2.44.1 Credential Guard Bypass via Execute Sub-workflow

CVE-2026-121946

zbateson mail-mime-parser before 3.0.9 and 4.x before 4.0.6 CRLF Header Injection via Message Builders

CVE-2026-118680

SiYuan 3.8.7 through 3.8.8 Path Traversal via GLOBALROOT Alias

CVE-2026-118647

n8n before 1.123.85, 2.43.5, and 2.44.1 SeaTable Trigger API Token Exposure via Execution Data

CVE-2026-116873

Semantic MediaWiki 7.3.0 Missing Authorization via smwtask API run-joblist and update

CVE-2026-116811

OpenPanel before 3.0.0 Sandbox Escape RCE via Webhook JavaScript Template

CVE-2026-103248

n8n before 1.123.80, 2.39.6, and 2.40.1 PostgREST Filter Injection via Supabase