Undergraduate student interested in vulnerability research, SBOM, software supply-chain security, and CTF.
Passed the Registered Information Security Specialist Examination (SC).
| Advisory | Finding | Severity | Credit |
|---|---|---|---|
| CVE-2026-30884 | Authorization Bypass (CWE-639) |
Critical / CVSS 9.6 | Reporter |
| GHSA-q7hv-rqpp-7f88 | Missing Authorization (CWE-862) |
High / CVSS 8.5 | Reporter |
A Web GUI for generating SPDX and CycloneDX SBOMs from container images using Syft and Trivy.
Python Docker Syft Trivy SPDX CycloneDX
Articles about CTF and security are available on Qiita (@Taka-C).



