← All credits

manus-pi

65 vulnerability records and advisories credit this contributor.

CVE-2026-110858

GitPython 3.1.30 before 3.2.0 Command Injection via Remote.pull() Refspec

CVE-2026-110869

Nodemailer 3.0.0 before 10.0.13 ReDoS via SMTP AUTH Mechanism Detection Regexes

CVE-2026-109344

DOMPurify from 3.4.13 before 3.4.16 DOM XSS via IN_PLACE afterSanitize Hooks

CVE-2026-109315

Grav 2.0.22 before 2.1.7 Clockwork Debugger Token Disclosure via Twig Sandbox

CVE-2026-109324

Grav before 2.1.7 Memory Exhaustion via Oversized Image Transforms

CVE-2026-109960

Froxlor 2.0.0 before 2.3.14 Stored XSS via Customer Theme Value

CVE-2026-109573

phpMyFAQ before 4.1.9 SQL Injection via api/autocomplete Search Endpoint

CVE-2026-105830

league/commonmark 2.0.0 before 2.10.2 Quadratic DoS via TableStartParser

CVE-2026-103762

SiYuan before v3.8.5 Missing Authorization in Save-Path Resolver Endpoints

CVE-2026-104410

SiYuan before 3.8.5 Information Disclosure via /api/export/preview