← All credits
Yu Bao, PayPal Cyber Security Team
26 vulnerability records and advisories credit this contributor.
CVE-2026-93452
snappy-java through 1.1.10.8 Buffer Overflow in Snappy.compress
CVE-2026-93451
snappy-java through 1.1.10.8 Buffer Overflow via typed uncompress methods
CVE-2026-90559
snappy-java through 1.1.10.8 Out-of-Bounds Write via uncompress
CVE-2026-87824
zstd-jni 1.3.3-1 through 1.5.7-13 Out-of-Bounds Read via Zstd.trainFromBufferDirect
CVE-2026-89044
Netty 4.1.133.Final through 4.1.137.Final and 4.2.13.Final through 4.2.17.Final HTTP Request Smuggling via Transfer-Encoding
CVE-2026-89045
zstd-jni 1.4.8-4 through 1.5.7-13 Denial of Service via Negative Length
CVE-2026-90560
zstd-jni 1.2.0 through 1.5.7-13 Out-of-Bounds Read via ZstdDictDecompress
CVE-2026-87825
zstd-jni 1.3.8-4 through 1.5.7-13 Use-After-Free of Compression and Decompression Dictionaries
CVE-2026-87795
zstd-jni 1.2.0 through 1.5.7-13 Out-of-Bounds Read via ZstdDictCompress
CVE-2026-89042
passport-saml-encrypted through 0.1.13 Authentication Bypass via Missing Signature Verification