← All credits
Siyang Wu
19 vulnerability records and advisories credit this contributor.
CVE-2026-105220
Twine 2 Desktop through 2.12.0 Arbitrary Code Execution via Imported Story Files
CVE-2026-105293
Legcord 1.1.0 through 1.3.0 Path Traversal via Theme IPC Handlers
CVE-2026-105218
gopay before 1.5.119 Disabled TLS Certificate Verification in xhttp Client
CVE-2026-105219
Mammoth.js 1.3.0 before 1.12.3 ReDoS via Style Map Tokeniser
CVE-2026-105217
Cockpit CMS 2.12.0 before 2.14.1 Disabled TLS Verification via cron.php
CVE-2026-95814
Vaultwarden through 1.37.3 Authorization Bypass via Missing Status Check
CVE-2026-86416
ILIAS before 9.23, 10.11, and 11.4 Missing Authorization in Group Object Action Methods
CVE-2026-86712
SiYuan before 3.8.2 Remote Code Execution via Clipboard
CVE-2026-86711
electerm before 5.3.15 Arbitrary Command Execution via Unvalidated runGlobalAsync IPC Bridge