← All credits
dem0000 (VulDB User)
12 vulnerability records and advisories credit this contributor.
CVE-2026-108944
repository RAE Config-Driven Model Instantiation model_utils.py get_obj_from_str code injection
CVE-2026-108942
philz1337x clarity-upscaler Extra Networks Card Rendering ui_extra_networks.py create_html_for_item cross site scripting
CVE-2026-108955
Tiiny-AI PowerInfer GGUF ggml.c gguf_init_from_file out-of-bounds
CVE-2026-108945
iMoonLab yolov13 AutoBackend Model Loading autobackend.py eval code injection
CVE-2026-108943
ModelTC LightX2V Tokenizer cosmos3_runner.py AutoTokenizer.from_pretrained code injection
CVE-2026-108941
Linketic CityGaussian Sidecar Parsing common.py parse_cfg_args code injection
CVE-2026-13524
CherryHQ cherry-studio MCP OAuth Local Callback Server callback.ts improper authorization
CVE-2026-13591
DeepMyst Mysti Contact Tracking ChannelBridge.ts _isTrackedConversation improper authorization
CVE-2026-13534
CherryHQ cherry-studio CherryIN Preload API MemoryService.ts sha256 authorization
CVE-2026-13489
78 xiaozhi-esp32 MCP Response mcp_server.cc ParseMessage improper synchronization