Research
Findings in software other people depend on, disclosed responsibly and written up where the vendor allows.
| Date | Affected | Title | Summary |
|---|---|---|---|
| MetaMask | Content Injection on portfolio.metamask.io | Injection vulnerability enabling native phishing attacks via the official domainweb-appwallet | |
| bracex | Multiple DoS Vulnerabilities in bracex | Three denial-of-service bugs in bracex, the Python brace-expansion library.pythonsupply-chainopen-source | |
| Matomo | Stored XSS Admin Takeover in Matomo | A stored cross-site scripting bug in Matomo that allowed taking over an administrator account.phpweb-app |