tinyb0y

5 credited records · 5 in the last 12 months · 0 in CISA KEV

Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.

Credited records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
35Monitor	CVE-2026-70410No exploit	Apache Calcite Avatica: Unrestricted class initialization when instantiating pluginsapache software foundation · apache calcite avatica · CWE-470	High8.8	—	0.6%	Sep 22, 2026
33Monitor	CVE-2026-76222No exploit	GitPython before 3.1.58 Path Traversal via .gitmodules Submodule Namegitpython project · gitpython · CWE-22 Pre-auth Path traversal	High8.4	—	0.4%	Aug 19, 2026
28Monitor	CVE-2026-19671No exploit	Improper handling of highly compressed data (data amplification) in CISA Malcolmcisagov · malcolm · CWE-409	High7.1	—	0.4%	Aug 18, 2026
21Monitor	CVE-2026-19670No exploit	Incorrect Authorization in CISA Malcolmcisagov · malcolm · CWE-863 Broken access control (IDOR)	Medium5.3	—	0.2%	Aug 18, 2026
21Monitor	CVE-2026-19135No exploit	OpenNMS JEXL sandbox bypass in Measurements REST API allows ROLE_USER to load arbitrary classesthe opennms group · meridian · CWE-470	Medium5.4	—	0.3%	Aug 13, 2026

CVE-2026-70410
35Monitor
Apache Calcite Avatica: Unrestricted class initialization when instantiating plugins
HighCVSS 8.8No exploitEPSS 1%
apache software foundation · apache calcite avaticaSep 22, 2026
CVE-2026-76222
33Monitor
GitPython before 3.1.58 Path Traversal via .gitmodules Submodule Name
HighCVSS 8.4No exploitEPSS 0%
- Pre-auth
- Path traversal
gitpython project · gitpythonAug 19, 2026
CVE-2026-19671
28Monitor
Improper handling of highly compressed data (data amplification) in CISA Malcolm
HighCVSS 7.1No exploitEPSS 0%
cisagov · malcolmAug 18, 2026
CVE-2026-19670
21Monitor
Incorrect Authorization in CISA Malcolm
MediumCVSS 5.3No exploitEPSS 0%
- Broken access control (IDOR)
cisagov · malcolmAug 18, 2026
CVE-2026-19135
21Monitor
OpenNMS JEXL sandbox bypass in Measurements REST API allows ROLE_USER to load arbitrary classes
MediumCVSS 5.4No exploitEPSS 0%
the opennms group · meridianAug 13, 2026