← All credits
Wayde Shi (PayPal Cyber Security Team)
14 vulnerability records and advisories credit this contributor.
CVE-2026-97058
sprintf-js through 1.1.3 Denial of Service via Unbounded Precision
CVE-2026-93748
http-cache-semantics through 4.2.0 Cross-User Cache Disclosure via max-stale
CVE-2026-93687
braces through 3.0.3 Stack Overflow via Deeply Nested Patterns
CVE-2026-93435
redis-parser through 3.0.0 Denial of Service via Unbounded Recursion
CVE-2026-97057
redis-parser through 3.0.0 Denial of Service via Invalid Array Length
CVE-2026-93753
deepmerge through 4.3.1 Prototype Poisoning via mergeObject
CVE-2026-93750
http-cache-semantics through 4.2.0 Cross-Client Cache Disclosure via Vary Wildcard
CVE-2026-90474
MCPHub before 1.0.32 OAuth 2.0 Authentication Bypass
CVE-2026-90473
msgpack-java through 0.9.12 Integer Overflow via MAP32
CVE-2026-90472
msgpack-java through 0.9.12 Stack Overflow via Nested Arrays