Civitasmass

Independent security researcher

Jing Qian

Civitasmass

I study how web applications and AI systems fail, and test where their safeguards hold.

Selected field note

The 19-Point Result I Almost Ignored

A modest email experiment became the basis of my 7th-place, gold-medal finish in Kaggle's AI Agent Security competition. Recognizing it took longer than building it.

Read note
Two abstract candidate tracks, with one breaking at a gate while the quieter path survives a sequence of validation gates8 min read

Public records

Recent
disclosures

Research archive
CVE-2026-85122 · Easy Form Builder 4.0.0–4.1.3Unauthenticated stored XSS via form type confusion
CVE-2026-82049 · CPython < 3.14.0b1Tarfile extraction filter bypass via hard link to symlink