Security releases
Researcher credits in vendor advisories
Vendors name researchers in their own advisories. Find your line and claim it. It counts on your profile right away and gets a BugRater ID you can quote.
Vendor
-
David-Crty CVE-2026-121939
Databasement before 1.10.9 contains an authentication bypass vulnerability in OAuthService::findOrCreateLocalUser() that links OIDC identities to local users by
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit
-
David-Crty david-crty-2026-10
David-Crty Security Releases - October 2026
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit -
David-Crty CVE-2026-103534
A vulnerability was determined in David-Crty databasement up to 1.7.1. Affected is the function SnapshotPolicy.viewAny/SnapshotPolicy.view of the file /api/v1/s
0 CVEs and 0 credit lines.
-
David-Crty CVE-2026-103533
A vulnerability was found in David-Crty databasement up to 1.7.1. This impacts the function https:/github.com/David-Crty/databasement/pull/511 of the file app/H
0 CVEs and 0 credit lines.