CVEs

Chronologically ordered list of Common Vulnerabilities and Exposure I’ve found and reported.

6 Aug 2026
CVE-2026-19022
OS Command Injection in OpenHands
4 May 2026
CVE-2026-7597
Unsafe Deserialization in mem0ai/mem0
20 Mar 2026
CVE-2026-33204
Unauthenticated Denial of Service via JWE header tampering in simplejwt
25 Feb 2026
CVE-2026-2970
Unsafe Deserialization in Datapizza-AI Redis Cache
25 Feb 2026
CVE-2026-2969
Server Side Template Injection in Datapizza-AI
10 Dec 2025
CVE-2025-67511
OS Command Injection in Cybersecurity AI (CAI) <= 0.5.9
11 Nov 2025
CVE-2025-62780
Stored XSS in changedetection.io before v0.50.34
15 Oct 2025
CVE-2025-62380
HTML Injection and XSS Filter Bypass in Mailgen < 2.0.32
15 Oct 2025
CVE-2025-62366
HTML Injection and XSS Filter Bypass in Mailgen < 2.0.31
15 Oct 2025
CVE-2025-59526
HTML Injection and XSS Filter Bypass in Mailgen < 2.0.30
16 Jul 2025
CVE-2025-47943
Stored XSS in Gogs <= 0.13.2
2 Apr 2025
CVE-2025-25362
Server Side Template Injection in Spacy-LLM v0.7.2 leading to RCE
8 May 2024
CVE-2024-32651
Server Side Template Injection in changedetection.io leading to RCE
4 May 2023
CVE-2023-30097
Stored XSS in TotalJS messenger
4 May 2023
CVE-2023-30096
Stored XSS in TotalJS messenger
4 May 2023
CVE-2023-30095
Stored XSS in TotalJS messenger
4 May 2023
CVE-2023-30094
Stored XSS in TotalJS Flow v10
3 May 2023
CVE-2023-30093
XSS in Open Networking Foundation ONOS from version v1.9.0 to v2.7.0
14 Mar 2023
CVE-2023-27070
Stored XSS in TotalJS OpenPlatform
14 Mar 2023
CVE-2023-27069
Stored XSS in TotalJS OpenPlatform
15 Feb 2023
CVE-2023-24769
Stored XSS in changedetection.io before v0.40.1.1
14 Feb 2023
CVE-2023-24279
XSS in Open Networking Foundation ONOS from version v1.9.0 to v2.7.0
30 Oct 2022
CVE-2022-44019
RCE in Total.js 4 before 0e5ace7
11 Oct 2022
CVE-2022-41392
Stored XSS in TotalJS CMS