CVEs I've discovered and responsibly disclosed.
- CVE-2026-44373 (Nitro (Server Toolkit / Nitropack))
- CVE-2026-29177 (Craft Commerce)
- CVE-2026-29176 (Craft Commerce)
- CVE-2026-29175 (Craft Commerce)
- CVE-2026-29174 (Craft Commerce)
- CVE-2026-29173 (Craft Commerce)
- CVE-2026-29172 (Craft Commerce)
- CVE-2026-28783 (Craft CMS)
- CVE-2026-28782 (Craft CMS)
- CVE-2026-28781 (Craft CMS)
- CVE-2026-28697 (Craft CMS)
- CVE-2026-27126 (Craft CMS)
- CVE-2026-25522 (Craft Commerce)
- CVE-2026-25496 (Craft CMS)
- CVE-2026-25495 (Craft CMS)
- CVE-2026-25494 (Craft CMS)
- CVE-2026-25493 (Craft CMS)
- CVE-2026-25491 (Craft CMS)
- CVE-2026-25490 (Craft Commerce)
- CVE-2026-25489 (Craft Commerce)
- CVE-2026-25488 (Craft Commerce)
- CVE-2026-25487 (Craft Commerce)
- CVE-2026-25486 (Craft Commerce)
- CVE-2026-25485 (Craft Commerce)
- CVE-2026-25484 (Craft Commerce)
- CVE-2026-25483 (Craft Commerce)
- CVE-2026-25482 (Craft Commerce)
- CVE-2025-68437 (Craft CMS)
- CVE-2025-65097 (RomM)
- CVE-2025-65096 (RomM)
- CVE-2025-65027 (RomM)