Security releases
Researcher credits in vendor advisories
Vendors name researchers in their own advisories. Find your line and claim it. It counts on your profile right away and gets a BugRater ID you can quote.
Vendor
These 2 releases credit 2 lines.
2 are still open to claim.
One mark per credit line
Open
Claimed
-
Diasurgical CVE-2026-116842
DevilutionX 1.4.0 through 1.5.5 contains a heap buffer overflow vulnerability in the bundled libmpq libmpq__archive_dup routine when opening crafted MPQ archive
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit -
Diasurgical CVE-2026-116841
DevilutionX 1.4.0 through 1.5.5 contains an out-of-bounds read vulnerability in the bundled libmpq libmpq__file_number_from_hash function that allows attackers
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit