← All credits
Eric-c (VulDB User)
20 vulnerability records and advisories credit this contributor.
CVE-2026-19246
HKUDS nanobot Provider-returned Image URL image_generation.py _download_image_data_url server-side request forgery
CVE-2026-19244
HKUDS nanobot MCP enabledTools Scope mcp.py connect_mcp_servers access control
CVE-2026-19245
HKUDS nanobot Login-shell Environment shell.py ExecTool._prepare_command information disclosure
CVE-2026-19243
HKUDS nanobot Shell Allowlist shell.py ExecTool._spawn os command injection
CVE-2026-12773
BerriAI litellm MCP Proxy user_api_key_auth_mcp.py UserAPIKeyAuth improper authentication
CVE-2026-12770
BerriAI litellm Admin Key key_management_endpoints.py improper authorization
CVE-2026-12771
BerriAI litellm M2M JWT user_api_key_auth.py improper authorization
CVE-2026-12772
BerriAI litellm PROXY_ADMIN database API Key Generator login_utils.py authenticate_user session expiration
CVE-2026-12774
BerriAI litellm MCP Server Connection Testing rest_endpoints.py _execute_with_mcp_client server-side request forgery
CVE-2026-12795
BerriAI litellm SSO Debug Flow ui_sso.py json.dumps missing authentication