← All credits
Yu Sun
35 vulnerability records and advisories credit this contributor.
CVE-2026-61461
Dify < 1.16.0-rc1 SQL Injection via MyScale Vector Store search_by_full_text
CVE-2026-58473
Cognee < 1.2.0 Unauthorized LLM Configuration Overwrite via /api/v1/settings
CVE-2026-48545
Gradio < 6.15.0 Cookie Injection via Shared Proxy Client
CVE-2026-48544
Taipy 4.1.1 Path Traversal via ElementLibrary.get_resource()
CVE-2026-10108
xiaomusic 0.5.7 Path Traversal via GET /music endpoint
CVE-2026-10105
agno 2.6.5 SQL Injection via ClickHouse delete_by_metadata()
CVE-2026-10099
XX-Net V5.16.6 WebSocket Frame Parsing Data Corruption via simple_http_server.py
CVE-2026-65010
Datasets Symlink-following Arbitrary File Write via Extractor.extract()
CVE-2026-86258
nbviewer through 1.0.1 Path Traversal via LocalFileHandler
CVE-2026-82454
Omnivore before android-0.227.0 Authentication Bypass via Apple Sign-in