← All credits
VulDB CNA Team
2120 vulnerability records and advisories credit this contributor.
CVE-2026-17433
nanocoai NanoClaw MCP Server Approval chat-sdk-bridge.ts createChatSdkBridge.setup improper authorization
CVE-2026-17500
ggml-org llama.cpp json-schema-to-grammar.cpp _visit_pattern null pointer dereference
CVE-2026-17459
perwendel spark SparkJava ExternalResourceHandler.jav staticFiles.externalLocation symlink
CVE-2026-17513
ggml-org whisper.cpp ggml.c ggml_ftype_to_ggml_type assertion
CVE-2026-17458
mf-yang openclaw-cn Browser Control HTTP API agent.act.ts clickViaPlaywright server-side request forgery
CVE-2026-17514
ZJONSSON node-unzipper extract.js Extract path traversal
CVE-2026-17457
mf-yang openclaw-cn Scheme navigation-guard.ts assertBrowserNavigationAllowed information disclosure
CVE-2026-17512
ggml-org whisper.cpp log_mel_spectrogram out-of-bounds
CVE-2026-16764
OWASP DefectDojo API/Web serializers.py UserSerializer privileges management
CVE-2026-16763
localstack serverless-localstack Configuration index.js os command injection