← All credits

JebeenLee

3 vulnerability records and advisories credit this contributor.

Token public-only scope bypassed on Limited-visibility owners (Repository + Package categories) — residual after CVE-2026-25714 / PR #37118

SSRF via Migration Asset Downloads Bypasses hostmatcher — Reads Internal Files and Cloud Metadata

multer vulnerable to Denial of Service via incomplete cleanup of aborted uploads