← All credits
VulDB CNA Team
2123 vulnerability records and advisories credit this contributor.
CVE-2026-18990
letta-ai LettaBot API Status Route server.ts missing authentication
CVE-2026-18998
cosmicstack-labs mercury-agent delegate_task Tool sub-agent.ts SubAgent.run improper authorization
CVE-2026-19008
mf-yang openclaw-cn apply_patch Tool sandbox-paths.ts assertNoSymlinkEscape link following
CVE-2026-19036
Shibby Tomato wanoptions sub_40F88C os command injection
CVE-2026-19045
NocteDefensor LudusMCP get_credential_from_user secretDialog.ts SecretDialog.showSecretDialog command injection
CVE-2026-19046
NocteDefensor LudusMCP ludus_environment_guides_search ludusEnvironmentGuidesSearch.ts path traversal
CVE-2026-19038
MonomythDevelopment la-forge-mcp screenshot_element Tool index.ts screenshotElement path traversal
CVE-2026-18969
Rongzhitong Visual Integrated Command and Dispatch Platform upload unrestricted upload
CVE-2026-19005
nanocoai NanoClaw Child-Agent Creation create-agent.ts handleCreateAgent privileges management
CVE-2026-19022
OpenHands send_pull_request.py initialize_repo command injection