Advisories I've found
This page records any security advisories I have discovered, responsibly disclosed and had accepted, across platforms like GitHub Security Advisories (GHSAs) and HackerOne.
| Date | Company/Product | Advisory link | AI used as part of the discovery process | AI used as part of the verification process | AI used as part of the disclosure process | Writeup |
|---|---|---|---|---|---|---|
| 2026-08-27 | Renovate | GHSA-9hmg-9h89-jhmx | ✅ | ✅ | ❌ | |
| 2026-08-27 | Renovate | GHSA-w57v-h33h-835c | ✅ | ✅ | ❌ | |
| 2026-08-27 | Renovate | GHSA-4hmw-qw74-vrhm | ✅ | ✅ | ❌ | |
| 2026-08-27 | Renovate | GHSA-rh7w-ccch-gh49 | ✅ | ✅ | ❌ | |
| 2026-08-27 | Renovate | GHSA-v73q-hvqx-hxwx | ✅ | ✅ | ❌ | |
| 2024-05-09 | GitHub | (No public advisory number, other than my report) | ❌ | ❌ | ❌ | Responsible Disclosure: Using GitHub Search (without logging in using SSO) still allows searching |