← All credits

Qi Deng (https://github.com/ikow)

2 vulnerability records and advisories credit this contributor.

CVE-2026-16052
Cookie Attribute Injection via Unescaped Semicolons in http.cookies.Morsel
CVE-2026-8328
FTP PASV SSRF, ftpcp() does not use actual peer address, trusts server-supplied PASV host address