Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

mtrudel — Vulnerabilities & Security Advisories 12

Browse all 12 CVE security advisories affecting mtrudel. AI-powered Chinese analysis, POCs, and references for each vulnerability.

mtrudel is primarily associated with web application vulnerabilities, with five CVEs recorded focusing on remote code execution and cross-site scripting. Their work often involves identifying flaws in content management systems and e-commerce platforms. Historically, their reported vulnerabilities frequently center on improper input validation and insufficient access controls, leading to privilege escalation risks. While no major public security incidents are directly linked to mtrudel, their CVE contributions highlight persistent issues in web security, particularly in how applications handle user-supplied data and enforce authentication mechanisms. Their findings consistently emphasize the need for robust input sanitization and secure session management to prevent exploitation.

Found 12 results / 12 Clear Filters
Top products by mtrudel: bandit
CVE ID Title CVSS Severity Published
CVE-2026-105660 Unvalidated HTTP/1 request-target authority lets a client choose conn.host and conn.port in Bandit — bandit CWE-1286 6.9 Medium 2026-10-15
CVE-2026-105659 HTTP/2 blocked-send deadlines reset on every WINDOW_UPDATE, letting a trickle pin stream processes indefinitely in Bandit — bandit CWE-400 8.7 High 2026-10-14
CVE-2026-75484 HTTP/2 header field values containing CR, LF or NUL are passed to the application unvalidated in Bandit — bandit CWE-93 6.9 Medium 2026-08-20
CVE-2026-74836 HTTP/2 connection-window starvation pins Plug processes indefinitely in Bandit — bandit CWE-770 8.7 High 2026-08-20
CVE-2026-65623 Quadratic CPU blow-up reassembling fragmented WebSocket messages in Bandit — bandit CWE-407 8.7 High 2026-07-24
CVE-2026-39806 HTTP/1 chunked decoder infinite loop on requests with trailer fields in bandit — bandit CWE-835 - - 2026-05-13
CVE-2026-39803 HTTP/1 chunked body reader ignores length cap in bandit — bandit CWE-770 - - 2026-05-13
CVE-2026-39805 CL.CL HTTP request smuggling via duplicate Content-Length in bandit — bandit CWE-444 6.3 Medium 2026-05-01
CVE-2026-39804 WebSocket permessage-deflate inflate has no output-size cap in bandit — bandit CWE-770 7.5 - 2026-05-01
CVE-2026-39807 Client-supplied URI scheme trusted without transport verification in bandit — bandit CWE-807 7.5 - 2026-05-01
CVE-2026-42786 WebSocket fragmented message reassembly unbounded in bandit — bandit CWE-770 7.5 - 2026-05-01
CVE-2026-42788 HTTP/2 frame size limit checked after body is buffered in bandit — bandit CWE-770 5.9 - 2026-05-01

This page lists every published CVE security advisory associated with mtrudel. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.