← All credits
Eric-c (VulDB User)
20 vulnerability records and advisories credit this contributor.
CVE-2026-19246
HKUDS nanobot Provider-returned Image URL image_generation.py _download_image_data_url server-side request forgery
CVE-2026-19244
HKUDS nanobot MCP enabledTools Scope mcp.py connect_mcp_servers access control
CVE-2026-19245
HKUDS nanobot Login-shell Environment shell.py ExecTool._prepare_command information disclosure
CVE-2026-19243
HKUDS nanobot Shell Allowlist shell.py ExecTool._spawn os command injection
CVE-2026-12773
BerriAI litellm MCP Proxy user_api_key_auth_mcp.py UserAPIKeyAuth improper authentication
CVE-2026-12795
BerriAI litellm SSO Debug Flow ui_sso.py json.dumps missing authentication
CVE-2026-12770
BerriAI litellm Admin Key key_management_endpoints.py improper authorization
CVE-2026-12796
BerriAI litellm SSO Authentication Flow ui_sso.py get_redirect_response_from_openid session expiration
CVE-2026-12772
BerriAI litellm PROXY_ADMIN database API Key Generator login_utils.py authenticate_user session expiration
CVE-2026-12798
BerriAI litellm MCP OpenAPI Spec Loader openapi_to_mcp_generator.py load_openapi_spec_async server-side request forgery