← All credits

theluckystrike

3 vulnerability records and advisories credit this contributor.

CVE-2026-59765
SSRF via Migration Asset Downloads Bypasses hostmatcher — Reads Internal Files and Cloud Metadata
CVE-2026-23603
Blind SSRF in OAuth2 avatar synchronization via unvalidated OIDC picture claim
CVE-2026-58511
Webhook Authorization Header Returned in Plaintext via API