[SECURITY RESEARCH]
Zero-Days Discovered by
CodeAnt AI Research
Zero-Days
Discovered by
CodeAnt AI Research
Vulnerabilities we found, exploits we built, patterns we keep seeing
[DISCLOSURES]
All Research
Every vulnerability we've reported, with the reproduction steps and the patch that fixed it.
Aug 31, 2026
Dissecting FOIS: Log4j2's Half-Built Deserialization Filter
Vulnerability research
Apache Log4j2
Aug 31, 2026
Dissecting FOIS: Log4j2's Half-Built Deserialization Filter
Vulnerability research
Apache Log4j2
Aug 31, 2026
A Finder Authorization Bypass in Claude Code Computer Use on macOS
HackerOne #3885687
CVSS 7.7
Aug 31, 2026
A Finder Authorization Bypass in Claude Code Computer Use on macOS
HackerOne #3885687
CVSS 7.7
Aug 27, 2026
How a Triage User Injects Into a Claude Code Action Write Run
HackerOne #3918594
CVSS 7.5
Aug 27, 2026
How a Triage User Injects Into a Claude Code Action Write Run
HackerOne #3918594
CVSS 7.5
Aug 27, 2026
Breaking the Workspace Boundary: A Parent-Directory TOCTOU in Claude Code on macOS
HackerOne #3882177
CVSS 7.7
Aug 27, 2026
Breaking the Workspace Boundary: A Parent-Directory TOCTOU in Claude Code on macOS
HackerOne #3882177
CVSS 7.7
Mar 3, 2026
CVE-2026-29000: Critical pac4j-jwt Auth Bypass Using a Public Key
CVE-2026-29000
CVSS 10
Mar 3, 2026
CVE-2026-29000: Critical pac4j-jwt Auth Bypass Using a Public Key
CVE-2026-29000
CVSS 10
Mar 9, 2026
CVE-2026-28292: simple-git RCE Bypasses Two CVE Patches
CVE-2026-28292
CVSS 9.8
Mar 9, 2026
CVE-2026-28292: simple-git RCE Bypasses Two CVE Patches
CVE-2026-28292
CVSS 9.8
Aug 23, 2026
CVE-2026-71503: Reflected XSS via the type parameter
CVE-2026-71503
CVSS 9.3
Aug 23, 2026
CVE-2026-71503: Reflected XSS via the type parameter
CVE-2026-71503
CVSS 9.3
Aug 23, 2026
CVE-2026-71504: Mass Assignment in Members API via pass
CVE-2026-71504
CVSS 8.3
Aug 23, 2026
CVE-2026-71504: Mass Assignment in Members API via pass
CVE-2026-71504
CVSS 8.3
Aug 23, 2026
CVE-2026-71505: Dolibarr BOLA Enables Portal Account Takeover
CVE-2026-71505
CVSS 8.1
Aug 23, 2026
CVE-2026-71505: Dolibarr BOLA Enables Portal Account Takeover
CVE-2026-71505
CVSS 8.1
Mar 11, 2026
CVE-2026-31988: jszip DoS via Malformed ZIP File
CVE-2026-31988
CVSS 6.9
Mar 11, 2026
CVE-2026-31988: jszip DoS via Malformed ZIP File
CVE-2026-31988
CVSS 6.9
Aug 23, 2026
CVE-2026-71511: Dolibarr Members API Exposes Password Hashes
CVE-2026-71511
CVSS 6.5
Aug 23, 2026
CVE-2026-71511: Dolibarr Members API Exposes Password Hashes
CVE-2026-71511
CVSS 6.5
Aug 23, 2026
CVE-2026-71510: Blind Column Extraction via sqlfilters
CVE-2026-71510
CVSS 6.5
Aug 23, 2026
CVE-2026-71510: Blind Column Extraction via sqlfilters
CVE-2026-71510
CVSS 6.5
Aug 23, 2026
CVE-2026-71508: Dolibarr Mass Assignment to Payroll Tampering
CVE-2026-71508
CVSS 6.5
Aug 23, 2026
CVE-2026-71508: Dolibarr Mass Assignment to Payroll Tampering
CVE-2026-71508
CVSS 6.5
Aug 23, 2026
CVE-2026-71509: Dolibarr Mass Assignment Lets Users Self-Approve Expenses
CVE-2026-71509
CVSS 6.5
Aug 23, 2026
CVE-2026-71509: Dolibarr Mass Assignment Lets Users Self-Approve Expenses
CVE-2026-71509
CVSS 6.5
Aug 23, 2026
CVE-2026-71507: Dolibarr BOLA Lets Attackers Redirect Supplier Payments
CVE-2026-71507
CVSS 6.5
Aug 23, 2026
CVE-2026-71507: Dolibarr BOLA Lets Attackers Redirect Supplier Payments
CVE-2026-71507
CVSS 6.5
Aug 23, 2026
CVE-2026-71506: Dolibarr Payment Deletion via Incorrect Authorization
CVE-2026-71506
CVSS 6.5
Aug 23, 2026
CVE-2026-71506: Dolibarr Payment Deletion via Incorrect Authorization
CVE-2026-71506
CVSS 6.5
[GET STARTED]
Let AI Fix Your Code,
You Build the Future
START PENTEST
