CVEs
Some of my publicly disclosed vulnerabilities.
| CVE | Project | CVSS 3.1 | Vulnerability type | Write-up | Advisory |
|---|---|---|---|---|---|
| CVE-2026-48720 | Warp | 8.8 | File write (CWE-73) | blog post | GHSA-5h96-jrrq-6hxq |
| CVE-2026-45036 | Tabby | 7.0 | OS command injection (CWE-78) | blog post | GHSA-qr3x-j8g9-xhf6 |
| CVE-2026-42851 | kitty | 7.8 | Code injection (CWE-94) | blog post | GHSA-w98g-hpvr-r332 |
| CVE-2026-0540 | DOMPurify | 6.1 | Cross-site scripting (CWE-79) | blog post | GHSA-v2wj-7wpq-c8vv |