← All credits
Caolán McNamara of Collabora Productivity
14 vulnerability records and advisories credit this contributor.
CVE-2026-63277
RCE via calcext:data-mappings, sql provider and jdbc connector
CVE-2026-63270
Environment/ini-file leaks
CVE-2026-63269
LFI and GET SSRF via GStreamer and HLS playlists
CVE-2026-63268
LFI via calcext:data-mappings, sql provider and sdbc:flat:file:// db href
CVE-2026-63267
LFI and GET SSRF via calcext:data-mappings and csv provider
CVE-2026-63266
Arbitrary file write via calcext:data-mappings, sql provider and Firebird backup functionality
CVE-2026-63279
Out of bounds read in PICT image import
CVE-2026-63278
Package URLs can be used to exfiltrate arbitrary INI file values and environment variables
CVE-2026-63276
Stack buffer overflow in CFF to Type 1 font conversion
CVE-2026-63275
Stack buffer overflow in CFF font hint handling