← All credits
offset
57 vulnerability records and advisories credit this contributor.
CVE-2026-73618
Budibase Server before 3.40.0 NoSQL Injection via JSON Parameter
CVE-2026-73603
Flowise before 3.1.4 Credential Abuse via Text-to-Speech
CVE-2026-65911
DOMPurify before 3.4.0 XSS via ADD_ATTR/ADD_TAGS State Leakage
CVE-2026-65902
DOMPurify before 3.4.7 Hook Mutation Pollution via allowedTags
CVE-2026-65899
DOMPurify before 3.4.9 Trusted Types Policy State Contamination
CVE-2026-115352
Mistune before 3.3.0 Quadratic-Time DoS via Unmatched Brackets in Inline Parser
CVE-2026-115353
Mistune before 3.3.0 Path Traversal via include Directive
CVE-2026-115351
Mistune 3.2.1 before 3.3.0 CSS Injection via Figure Directive figwidth Option
CVE-2026-115350
Mistune before 3.3.0 Stored XSS via Include Directive HTML Files
CVE-2026-110868
Renovate before 44.79.0 SSRF via HTTP Preset URLs and customDatasources