← All credits
Jonathan Leitschuh
18 vulnerability records and advisories credit this contributor.
CVE-2025-9611
Microsoft Playwright MCP Server < 0.0.40 DNS Rebinding via Missing Origin Header Validation
CVE-2020-36851
Rob--W cors-anywhere Misconfigured CORS Proxy Allows SSRF
CVE-2025-1686
Versions of the package io.pebbletemplates:pebble from 0 and before 4.1.0 are vulnerable to External Control of File Name or Path via the include tag. A high privileged attacker can access sensitive local files by crafting malicious notification templates
CVE-2022-21126
Creation of Temporary File in Directory with Insecure Permissions
CVE-2021-22571
Information Leak in SA360-webquery-bigquery through read on /tmp
CVE-2021-22572
Data-transfer-project information disclosure via tmp directory
CVE-2022-45787
Apache James MIME4J: Temporary File Information Disclosure in MIME4J TempFileStorageProvider
CVE-2022-24913
Versions of the package com.fasterxml.util:java-merge-sort before 1.1.0 are vulnerable to Insecure Temporary File in the StdTempFileProvider() function in StdTempFileProvider.java, which uses the permissive File.createTempFile() function, exposing tempora
CVE-2024-36264
Apache Submarine Commons Utils: default secret
CVE-2024-24683
Apache Hop Engine: ID isn't escaped when generating HTML