Security releases
Researcher credits in vendor advisories
Vendors name researchers in their own advisories. Find your line and claim it. It counts on your profile right away and gets a BugRater ID you can quote.
Vendor
This release credits 0 lines.
0 are still open to claim.
One mark per credit line
Open
Claimed
-
Solidtime-io CVE-2026-76806
Solidtime is an open-source time-tracking app. Prior to 0.16.0, TogglDataImporter::importData() read attacker-controlled project id values from projects.json in
0 CVEs and 0 credit lines.