← All credits
offset
57 vulnerability records and advisories credit this contributor.
CVE-2026-82865
pdfme schemas before 5.5.10 Cross-Site Scripting via i18n Label
CVE-2026-82864
pdfme pdf-lib before 5.5.10 Denial of Service via Decompression Bomb
CVE-2026-73618
Budibase Server before 3.40.0 NoSQL Injection via JSON Parameter
CVE-2026-65899
DOMPurify before 3.4.9 Trusted Types Policy State Contamination
CVE-2026-100856
AzuraCast before 0.23.6 Code Injection via Remote Relay Password
CVE-2026-100855
AzuraCast before 0.23.6 Missing Permission Check via /play
CVE-2026-100854
AzuraCast before 0.23.6 Metadata Injection via Liquidsoap API
CVE-2026-100629
Capgo backend before 12.127.5 Privilege Escalation via role_bindings PATCH
CVE-2026-101047
Fleet before 4.87.0 Unauthenticated iOS App Download via Predictable URLs
CVE-2026-100837
Edgeless Systems Contrast through 1.20.0 Credential Leak via Registry Suffix Matching