← All credits
Gregory Tan (Grg0rry)
4 vulnerability records and advisories credit this contributor.
CVE-2026-77776
Headroom Proxy Treats the Client-Supplied x-headroom-user-id Header as an Authenticated Identity
CVE-2026-75149
marimo < 0.23.15 Code Injection via MCP Server Configuration
CVE-2026-77775
Headroom Proxy Sends Upstream Requests to a Client-Supplied Base URL Without Address Validation
CVE-2026-67618
marimo < 0.23.15 API Key Exfiltration via Malicious Notebook PEP-723 Metadata