← All credits
offset
57 vulnerability records and advisories credit this contributor.
CVE-2026-45007
phpMyFAQ - Missing Permission Check on 12 Configuration API Endpoints Allows Information Disclosure
CVE-2026-115353
Mistune before 3.3.0 Path Traversal via include Directive
CVE-2026-65902
DOMPurify before 3.4.7 Hook Mutation Pollution via allowedTags
CVE-2026-115351
Mistune 3.2.1 before 3.3.0 CSS Injection via Figure Directive figwidth Option
CVE-2026-115350
Mistune before 3.3.0 Stored XSS via Include Directive HTML Files
CVE-2026-115352
Mistune before 3.3.0 Quadratic-Time DoS via Unmatched Brackets in Inline Parser
CVE-2026-110868
Renovate before 44.79.0 SSRF via HTTP Preset URLs and customDatasources
CVE-2026-109357
LibreNMS before 26.9.0 LDAP Filter Injection Authentication Bypass via Authorization Header
CVE-2026-90935
Froxlor before 2.3.7 Authorization Bypass via Mysqls.add API
CVE-2026-82866
@pdfme/common before 5.5.10 SSRF via Unvalidated URL Fetch