Security releases
Researcher credits in vendor advisories
Vendors name researchers in their own advisories. Find your line and claim it. It counts on your profile right away and gets a BugRater ID you can quote.
Vendor
These 2 releases credit 2 lines.
2 are still open to claim.
One mark per credit line
Open
Claimed
-
Cfdude CVE-2026-108953
mac-shell-mcp before 2.0.0 contains an OS command injection vulnerability that allows MCP clients to bypass the command whitelist by injecting shell metacharact
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit
-
Cfdude cfdude-2026-10
Cfdude Security Releases - October 2026
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit