A record of security vulnerabilities I've reported through coordinated disclosure. Each entry links to the vendor's advisory and a writeup of the issue, its impact, and the fix.
| Date | Project | Finding | Severity | Advisory |
|---|---|---|---|---|
| 2026-05 | BookStack | Username enumeration via login timing side-channel | Low | Link |
Full writeups are in /findings.
Security research and coordinated disclosure by Tanner Marks. HBIT (Cybersecurity) student focused on application security and reverse engineering.
- LinkedIn: Tanner Marks