← All credits
ybsun0215
7 vulnerability records and advisories credit this contributor.
CVE-2026-91984
Vikunja before 2.6.0 Broken Object-Level Authorization via task-position
CVE-2026-91985
Vikunja before 2.6.0 Privilege Escalation via Link Share Hash
CVE-2026-58434
Private Repository Metadata Remains Accessible After Access Revocation
CVE-2026-55982
OIDC userinfo Endpoint Returns Identity Claims Without Enforcing API Token Scopes
CVE-2026-25038
Gitea private organization labels are visible to unauthorized users
CVE-2026-24451
Gitea fork synchronization can expose private parent repository data
CVE-2026-58419
Notification API leaks private issue metadata after access revocation