← All credits

HaiND from the Post and Telecommunication Institute of Technology

28 vulnerability records and advisories credit this contributor.

CVE-2026-108604

Tabularis through 0.27.0 Read-Only Bypass via MCP run_query SELECT Classification

CVE-2026-108603

slide-maker through 5.8.0 Path Traversal via generate_images_openai.py

CVE-2026-108602

Helicone through v2025.08.21-1 SSRF via Jawn Webhook Sender DNS Resolution

CVE-2026-108600

open-multi-agent 1.5.0 through 1.21.2 Sandbox Escape via file_write Dangling Symlink

CVE-2026-108599

Phi 0.1.1 through 0.28.4 Symlink Workspace Write Restriction Bypass

CVE-2026-108597

Cohere Python SDK 5.11.0 through 7.2.0 Path Traversal via SageMaker Tar Extraction

CVE-2026-108596

OpenLIT 2.1.0 Authorization Bypass via x-openlit-project-id Header

CVE-2026-108595

Phi 0.3.0 through 0.28.4 Permission Bypass via agent_spawn Workdir

CVE-2026-108594

Mealie 3.26.0 through 3.28.0 SSRF via OIDC Picture Claim Avatar Fetch

CVE-2026-108593

9router 0.4.1 through 0.5.99 Config Injection RCE via hermes-settings Endpoint