GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration
← All credits

DavidCarliez

6 vulnerability records and advisories credit this contributor.

CVE-2026-72859
Budibase 3.39.4 before 3.40.0 Authorization Regression via S3 Presigned URL
CVE-2026-72855
Budibase before 3.40.0 DNS Rebinding SSRF via OpenAPI and REST
CVE-2026-63736
SurrealDB before 3.2.0 SSRF via JWKS URL hostname resolution
CVE-2026-61874
filebrowser before 2.63.17 Stale Public Share via Trailing-Slash Delete
CVE-2026-58657
Grav - Stored CSS Injection via Markdown Image resize() Action
CVE-2026-5038
multer vulnerable to Denial of Service via incomplete cleanup of aborted uploads