← All credits
K
7 vulnerability records and advisories credit this contributor.
CVE-2026-50112
Apache CloudStack: RCE and SSRF in direct download, metalink and NFS templates
CVE-2026-33264
Apache Airflow: DAG author RCE on webserver via unrestricted import_string() in BaseSerialization.deserialize()
CVE-2026-40557
Apache Storm Prometheus Reporter: Disabling TLS verification for Prometheus Reporter also disables it for all other connections
CVE-2026-41081
Apache Storm Client: Anonymous principal assigned on TLS client certificate verification failure
CVE-2026-35337
Apache Storm Client: RCE through Unsafe Deserialization via Kerberos TGT Credential Handling
CVE-2024-6485
XSS in Bootstrap button component
CVE-2024-9506
Regular Expression Denial of Service (ReDoS)