← All credits
Yu Sun
35 vulnerability records and advisories credit this contributor.
CVE-2026-69116
FlyEnv < 4.18.0 Cross-Site Scripting via v-html
CVE-2026-62239
FlashAttention Symlink Attack via tarfile.extractall in hopper/setup.py
CVE-2026-69110
OpenCode Studio < 2.4.4 Unauthenticated File Read via /api/tmp and /api/music
CVE-2026-86258
nbviewer through 1.0.1 Path Traversal via LocalFileHandler
CVE-2026-82881
Aix-DB through 1.2.4 Stored Cross-Site Scripting via Markdown
CVE-2026-82880
YaCy Search Server through 1.941 XML External Entity Injection via Parsers
CVE-2026-66004
BlenderMCP Path Traversal via download_polyhaven_asset API
CVE-2026-65010
Datasets Symlink-following Arbitrary File Write via Extractor.extract()
CVE-2026-49948
Mem0 0.2.8 Missing Authorization via POST /configure Endpoint
CVE-2026-11416
MoviePilot Path Traversal via Cloud Storage Download Handlers