← All credits
Claude Code
8 vulnerability records and advisories credit this contributor.
CVE-2026-103866
Apache Sling Engine: Hand-rolled parameter parser diverges from RFC/container parsing, enabling smuggling
CVE-2026-103864
Apache Sling Engine: Request-derived values reach log sinks without CR/LF neutralization
CVE-2026-103863
Apache Sling Engine: Include-protection mitigations bypassable via uncovered response-wrapper paths
CVE-2026-94251
Apache Sling Security Bundle: ContentDispositionFilter mediates only one address/API shape of a resource
CVE-2026-94243
Apache Sling Security Bundle: RefererFilter accepts weaker-than-origin evidence
CVE-2026-92001
Apache Sling XSS: Missing parser resource limits
CVE-2026-91999
Apache Sling XSS: Improper escaping in the XSS Webconsole plugin
CVE-2026-91928
Apache Sling XSS: Sanitizer bypass, uncontrolled resource consumption and failure pf protection mechanisms