← All credits
tonghuaroot
27 vulnerability records and advisories credit this contributor.
CVE-2026-105163
crossplane crossplane-runtime ImageConfig client.go Get toctou
CVE-2026-104458
YesWiki before 4.6.7 SSRF Guard Bypass via IPv6 Transition Addresses
CVE-2026-57590
Apache DolphinScheduler: Missing Authorization in Task Group APIs Allows Unauthorized Cross-Project Operations
CVE-2026-93426
SigNoz 0.87.0 before 0.142.0 - SQL Injection in v5 Query Builder Field Key Names
CVE-2026-94301
Apache MINA: CVE-2026-47065 resolveProxyClass fix missing from 2.0.X and 2.1.X branches (2.0.30 / 2.1.14) ZDRES-232
CVE-2026-93597
ArcadeDB before 26.9.1 SSRF via IPv6 transition addresses
CVE-2026-63769
Huginn < 2026.09.09 SSRF via ScenarioImport fetch_url Method
CVE-2026-9697
undici vulnerable to TLS certificate validation bypass via dropped requestTls in SOCKS5 ProxyAgent
CVE-2026-86735
snipe-it before 8.7.0 SSRF via IPv6 transition address bypass
CVE-2026-68494
jackson-core: Async parser maxNumberLength bypass via chunked digit accumulation (incomplete fix for CVE-2026-18401 / GHSA-72hv-8253-57qq)