← All credits
tndud042713
6 vulnerability records and advisories credit this contributor.
CVE-2026-82853
Nodemailer before 8.0.5 SMTP Command Injection via CRLF
CVE-2026-16117
@fastify/http-proxy vulnerable to prefix escape via URL-encoded characters
CVE-2026-56761
hono - HTML Injection via Improper JSX Attribute Name Handling in SSR
CVE-2026-9679
undici vulnerable to HTTP header injection via Set-Cookie percent-decoding
CVE-2026-11525
undici vulnerable to Set-Cookie SameSite attribute downgrade via permissive substring matching
CVE-2026-5079
multer vulnerable to Denial of Service via deeply nested field names