← All credits
4ra2n (A code security AI agent)
5 vulnerability records and advisories credit this contributor.
CVE-2026-31377
Apache Doris: Improper Authentication Allows Unauthorized Access to FE Meta Service
CVE-2026-46751
Apache Kvrocks: Does not remove the unsafe loadstring function from its Lua sandbox, allowing a user who can run EVAL scripts to load crafted, unvalidated bytecode that crashes the server process, resulting in a remote denial of service.
CVE-2026-34020
Apache OpenMeetings: Login Credentials Passed via GET Query Parameters
CVE-2026-33266
Apache OpenMeetings: Hardcoded Remember-Me Cookie Encryption Key and Salt
CVE-2026-33005
Apache OpenMeetings: Insufficient checks in FileWebService