← All credits

manus-use

207 vulnerability records and advisories credit this contributor.

CVE-2026-109331

Network-AI 5.14.0 before 5.15.2 Deny Pattern Bypass via ClaudeHookBridge extractFullTarget

CVE-2026-109351

Gitoxide gix-pack before 0.75.0 Denial of Service via Pack Header Object Count

CVE-2026-116207

YesWiki 4.6.0 before 4.7.0 SQL Injection via Bazar Entries Search API

CVE-2026-109283

Open WebUI 0.11.1 before 0.11.4 Authorization Bypass via OAuth Token Exchange

CVE-2026-111384

Nezha 1.0.0 before 2.3.15 Memory Exhaustion via File Manager WebSocket

CVE-2026-115370

Incus 6.0.5 before 6.0.7, 6.12.0 before 7.0.2, and 7.1.0 before 7.5.0 Restricted Project Bypass via Clustered Migration Refresh

CVE-2026-112780

Grav 2.0.15 before 2.2.2 Arbitrary Static Method Call via Flex Form replace-name@

CVE-2026-112770

Craft CMS before 4.18.8 and 5.11.0 Authenticated RCE via Twig group Filter Array-Callable

CVE-2026-114057

ArcadeDB 26.2.1 before 26.10.1 Bolt SHOW DATABASES Information Disclosure

CVE-2026-114097

Dulwich 0.23.1 before 1.2.8 Symlink Path Traversal via filter_branch Index Filter