← All credits
Venkatraman Kumar (r3dw0lfsec), Securin
7 vulnerability records and advisories credit this contributor.
CVE-2026-50633
Apache CXF: JNDI Injection vulnerability in DispatchMDBMessageListenerImpl
CVE-2026-50632
Apache CXF: JNDI Injection Vulnerability in JMSConfigFactory
CVE-2026-49875
Apache CXF: XML External Entity (XXE) Injection in W3CMultiSchemaFactory and EndpointReferenceUtils
CVE-2026-46745
Apache Airflow FAB provider: LDAP Filter Injection in FAB Auth Manager _search_ldap reachable via /auth/token
CVE-2026-50076
Apache Fory: Java ReplaceResolverSerializer deserialization checks bypass
CVE-2026-42359
Apache Airflow: Authenticated RCE via XCom PATCH endpoint — XComUpdateBody missing FORBIDDEN_XCOM_KEYS validator
CVE-2026-50203
Apache Airflow SFTP provider: Path traversal in SFTPHook.retrieve_directory allows local file write outside the destination directory via malicious server-supplied directory-entry names