Security advisories I've found
This page records any security advisories I have discovered, responsibly disclosed and had accepted, across platforms like GitHub Security Advisories (GHSAs) and HackerOne.
| Date | Company/Product | Advisory link | AI used as part of the discovery process | AI used as part of the verification process | AI used as part of the disclosure process | Writeup |
|---|---|---|---|---|---|---|
| 2026-09-01 | Renovate Operator | GHSA-whq7-h7cf-r229 | ✅ | ✅ | ✅ | |
| 2026-09-01 | Renovate Operator | GHSA-r33m-9688-gqmr | ✅ | ✅ | ✅ | |
| 2026-09-01 | Renovate Operator | GHSA-7wv7-rmvg-qh4v | ✅ | ✅ | ✅ | |
| 2026-09-01 | Renovate Operator | GHSA-6h6p-6c5c-jr9f | ✅ | ✅ | ✅ | |
| 2026-08-27 | Renovate | GHSA-9hmg-9h89-jhmx | ✅ | ✅ | ❌ | |
| 2026-08-27 | Renovate | GHSA-w57v-h33h-835c | ✅ | ✅ | ❌ | |
| 2026-08-27 | Renovate | GHSA-4hmw-qw74-vrhm | ✅ | ✅ | ❌ | |
| 2026-08-27 | Renovate | GHSA-rh7w-ccch-gh49 | ✅ | ✅ | ❌ | |
| 2026-08-27 | Renovate | GHSA-v73q-hvqx-hxwx | ✅ | ✅ | ❌ | |
| 2024-05-09 | GitHub | (No public advisory number, other than my report) | ❌ | ❌ | ❌ | Responsible Disclosure: Using GitHub Search (without logging in using SSO) still allows searching |