← All credits
Yu Sun
35 vulnerability records and advisories credit this contributor.
CVE-2026-73032
PapersGPT for Zotero 0.6.1 RCE via Unsanitized LLM Response eval()
CVE-2026-73030
unearth 0.18.2 Path Traversal via Unnormalized Paths and Symlink Escape
CVE-2026-69110
OpenCode Studio < 2.4.4 Unauthenticated File Read via /api/tmp and /api/music
CVE-2026-66004
BlenderMCP Path Traversal via download_polyhaven_asset API
CVE-2026-49121
AI Tensor Engine for ROCm (AITER) 0.1.14 Unauthenticated RCE via MessageQueue.recv() Pickle Deserialization
CVE-2026-49948
Mem0 0.2.8 Missing Authorization via POST /configure Endpoint
CVE-2026-49136
Banana Slides 0.4.0 Path Traversal via generate_image() in ai_service.py
CVE-2026-47119
Agent Zero < 1.15 Stored XSS via image_get API Endpoint
CVE-2026-47118
Agent Zero < 1.15 Path Traversal File Read via image_get API
CVE-2026-43624
F5-TTS 1.1.20 Path Traversal via finetune_gradio.py create_data_project()