Security releases
Researcher credits in vendor advisories
Vendors name researchers in their own advisories. Find your line and claim it. It counts on your profile right away and gets a BugRater ID you can quote.
Vendor
These 2 releases credit 2 lines.
2 are still open to claim.
One mark per credit line
Open
Claimed
-
Tildearrow CVE-2026-116731
Furnace through 0.6.8.3 contains an out-of-bounds write vulnerability in DivEngine::loadFTM() that allows attackers to corrupt heap memory via an unchecked subs
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit -
Tildearrow CVE-2026-116730
Furnace through 0.6.8.3 contains an out-of-bounds heap read vulnerability in DivEngine::loadFTM() in src/engine/fileOps/ftm.cpp, triggered by an unbounded DPCM
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit