← All credits
Eugene Lim
11 vulnerability records and advisories credit this contributor.
CVE-2023-26123
Versions of the package raysan5/raylib before 4.5.0 are vulnerable to Cross-site Scripting (XSS) such that the SetClipboardText API does not properly escape the ' character, allowing attacker-controlled input to break out of the string and execute arbitra
CVE-2023-26157
Versions of the package libredwg before 0.12.5.6384 are vulnerable to Denial of Service (DoS) due to an out-of-bounds read involving section->num_pages in decode_r2007.c.
CVE-2023-26140
Versions of the package @excalidraw/excalidraw from 0.0.0 are vulnerable to Cross-site Scripting (XSS) via embedded links in whiteboard objects due to improper input sanitization.
CVE-2020-7788
Prototype Pollution
CVE-2020-28471
Prototype Pollution
CVE-2020-28472
Prototype Pollution
CVE-2020-28448
Prototype Pollution
CVE-2020-28461
Prototype Pollution
CVE-2020-28441
Prototype Pollution
CVE-2020-28462
Prototype Pollution