Yunze
Zhao
← Back to home
← Back to home
CVE Disclosures
8 published CVEs from my security research, responsibly disclosed to the maintainers and confirmed by a CNA.
CVE-2026-15276Symphonia ≤ 0.6.0Jul 2026
CWE-404CVSS 3.3VDB-377216SBOMFUZZ
CVE-2026-15274fbxcel ≤ 0.9.0Jul 2026
CWE-404CVSS 3.3VDB-377215SBOMFUZZ
CVE-2026-14651grass ≤ 0.13.4Jul 2026
CWE-404CVSS 3.3VDB-376164SBOMFUZZ
CVE-2026-14650grass ≤ 0.13.4Jul 2026
CWE-404CVSS 3.3VDB-376163SBOMFUZZ
CVE-2026-10300SGLang 0.5.10.post1May 2026
CWE-617CVSS 3.7VDB-367593LLM Serving Fuzzing
CVE-2026-9540vLLM 0.19.0May 2026
CWE-404CVSS 5.3VDB-365601LLM Serving Fuzzing
CVE-2026-44223vLLM ≥ 0.18.0, < 0.20.0May 2026
CWE-131CVSS 6.5GHSA-83vm-p52w-f9pwLLM Serving Fuzzing
CVE-2026-7141vLLM ≤ 0.19.0Apr 2026
CWE-908CVSS 5.6VDB-359740LLM Serving Fuzzing
DISCOVERY ATTRIBUTION
SBOMFUZZ — An SBOM-guided fuzzing research project that continuously discovers vulnerabilities in open-source library dependencies.
LLM Serving Fuzzing — A fuzzing research project for continuous discovery of vulnerabilities in LLM serving systems such as vLLM and SGLang.