Security releases
Researcher credits in vendor advisories
Vendors name researchers in their own advisories. Find your line and claim it. It counts on your profile right away and gets a BugRater ID you can quote.
Vendor
-
C4illin CVE-2026-108694
ConvertX through 0.19.0 contains an arbitrary file read vulnerability that allows authenticated users to read server files because src/converters/pandoc.ts invo
0 CVEs and 0 credit lines.
-
C4illin CVE-2026-105080
In ConvertX before 0.19.0, converters/calibre.ts does not block recipe files, and instead passes them to the ebook-convert program from Calibre. This affects ex
0 CVEs and 0 credit lines.
-
C4illin c4illin-2026-10
C4illin Security Releases - October 2026
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit