← All credits
DavidCarliez
10 vulnerability records and advisories credit this contributor.
CVE-2026-101090
Nezha through 2.2.3 Host Header Injection via OAuth2 redirect_uri
CVE-2026-101048
Cloudreve before 4.17.0 SSRF via Admin.Read OAuth scope
CVE-2026-94382
Beszel before 0.19.0 Insecure Direct Object Reference via user-alerts
CVE-2026-91931
Flowise before 3.1.4 Remote Code Execution via Custom MCP npx
CVE-2026-72855
Budibase before 3.40.0 DNS Rebinding SSRF via OpenAPI and REST
CVE-2026-72859
Budibase 3.39.4 before 3.40.0 Authorization Regression via S3 Presigned URL
CVE-2026-63736
SurrealDB before 3.2.0 SSRF via JWKS URL hostname resolution
CVE-2026-61874
filebrowser before 2.63.17 Stale Public Share via Trailing-Slash Delete
CVE-2026-58657
Grav - Stored CSS Injection via Markdown Image resize() Action
CVE-2026-5038
multer vulnerable to Denial of Service via incomplete cleanup of aborted uploads