A consolidated index of the CVEs and vendor acknowledgements published under the Isopach name since 2020, covering network equipment, desktop software, mobile applications, and open-source libraries.
docx4j resolved OpenXML style inheritance without cycle detection, so a Word document whose styles referenced each other in a loop could exhaust the stack of any service that parsed it. Fixed in 11.5.14 and credited to Isopach.
HelloTalk stored full-precision GPS coordinates in an unencrypted local database even for users who had chosen to share only their country or city, and copied those coordinates onto other users' devices. The CVE record is now public.