Michael Holmquist

RustDesk through 1.4.9 Heap Buffer Overflow via Unvalidated CLIPRDR FileContentsResponse Length

Craftplan < 0.5.1 Broken Access Control Information Disclosure via Settings API

Flair 0.15.0 and 0.15.1 Deserialization of Untrusted Data via ClusteringModel.load

Hugo 0.93.0 through 0.165.0 Stored Cross-Site Scripting via Unescaped Code-Fence Attribute Values

Hugo 0.91.0 through 0.165.0 Server-Side Request Forgery via security.http.urls Lacking Destination Address Validation

Hugo 0.162.0 to 0.164.x - Node Permission Model Bypass via Default TailwindCSS Child-Process Grant

Unidata netcdf-c through 4.10.1 Out-of-bounds Write via Oversized HDF5 Attribute Name

darknet through 6.0 Out-of-Bounds Read and Write via Unchecked Layer Index in .cfg Parser

Vocos through 0.1.0 Arbitrary Code Execution via Unrestricted class_path in Model Configuration

Baserow before 2.3.1 Unauthenticated Data Disclosure via Discarded Permission Check on Builder Data Sources