$ grep -r "CVE-" ./research
disclosures
Vulnerabilities I have found and reported through coordinated disclosure. Each entry links to its NVD record and to the full write-up.
CVE-2025-65200
9.6 critical
Remote Code Execution via XSS to CloudFormation Chain
CWE-79
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
CVE-2025-69723
6.1 medium
Reflected Cross-Site Scripting (XSS)
CWE-79
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N