← All credits

Seth Larson (https://github.com/sethmlarson)

12 vulnerability records and advisories credit this contributor.

CVE-2026-3087
shutil.unpack_archive() doesn't check for Windows absolute paths in ZIPs
CVE-2026-6019
BaseCookie.js_output() does not neutralize embedded characters