← All credits
YU SUN
35 vulnerability records and advisories credit this contributor.
CVE-2026-65010
Datasets Symlink-following Arbitrary File Write via Extractor.extract()
CVE-2026-86258
nbviewer through 1.0.1 Path Traversal via LocalFileHandler
CVE-2026-82454
Omnivore before android-0.227.0 Authentication Bypass via Apple Sign-in
CVE-2026-93013
RAGFlow through 0.27.2 Tenant Import Endpoints Path Traversal
CVE-2026-93992
Gopeed through 2.0.0-beta.3 Arbitrary File Write via Path Traversal
CVE-2026-69116
FlyEnv < 4.18.0 Cross-Site Scripting via v-html
CVE-2026-62239
FlashAttention Symlink Attack via tarfile.extractall in hopper/setup.py
CVE-2026-82881
Aix-DB through 1.2.4 Stored Cross-Site Scripting via Markdown
CVE-2026-82880
YaCy Search Server through 1.941 XML External Entity Injection via Parsers
CVE-2026-79785
X-AnyLabeling before 4.0.0-beta.9 Improper Certificate Validation in Model Downloads