← All credits
tonghuaroot
25 vulnerability records and advisories credit this contributor.
CVE-2026-57590
Apache DolphinScheduler: Missing Authorization in Task Group APIs Allows Unauthorized Cross-Project Operations
CVE-2026-63769
Huginn < 2026.09.09 SSRF via ScenarioImport fetch_url Method
CVE-2026-93426
SigNoz 0.87.0 before 0.142.0 - SQL Injection in v5 Query Builder Field Key Names
CVE-2026-94301
Apache MINA: CVE-2026-47065 resolveProxyClass fix missing from 2.0.X and 2.1.X branches (2.0.30 / 2.1.14) ZDRES-232
CVE-2026-93597
ArcadeDB before 26.9.1 SSRF via IPv6 transition addresses
CVE-2026-9697
undici vulnerable to TLS certificate validation bypass via dropped requestTls in SOCKS5 ProxyAgent
CVE-2026-86735
snipe-it before 8.7.0 SSRF via IPv6 transition address bypass
CVE-2026-68494
jackson-core: Async parser maxNumberLength bypass via chunked digit accumulation (incomplete fix for CVE-2026-18401 / GHSA-72hv-8253-57qq)
CVE-2026-74866
@fastify/busboy vulnerable to CRLF injection via multipart Content-Disposition filename and name
CVE-2026-79658
Ech0 before 5.0.1 Denial of Service via Accept-Language