← All credits
alham-rizvi
51 vulnerability records and advisories credit this contributor.
CVE-2026-85585
SiYuan before v3.8.2 Unbounded Memory Consumption via ControlConcurrency
CVE-2026-82653
SiYuan before v3.8.1 Stored XSS via confirmDialog
CVE-2026-82654
SiYuan before v3.8.1 Stored XSS via block name
CVE-2026-82651
SiYuan before v3.8.1 Missing Authorization via /history and /repo/diff
CVE-2026-82652
SiYuan before v3.8.1 Information Disclosure via Publish Access
CVE-2026-82650
SiYuan before v3.8.1 Path Traversal via /api/template/render
CVE-2026-72699
Grav Login Plugin before 3.9.1 Email Enumeration via Registration
CVE-2026-80203
Grav before 1.0.18 Authentication Bypass via Scoped API Key
CVE-2026-72702
Grav CMS before 2.0.16 Origin Validation Bypass via Referer
CVE-2026-74802
SiYuan 3.7.3 Cross-Site WebSocket Hijacking via network proxy