diff --git a/CONTRIBUTORS.md b/CONTRIBUTORS.md
index c1f1a4a85..181569e81 100644
--- a/CONTRIBUTORS.md
+++ b/CONTRIBUTORS.md
@@ -150,7 +150,7 @@ When a proposal was incorporated through a later repair, its adoption is credite
 | [@sun1024](https://github.com/sun1024) | Privately reported a security issue in SILO | Acknowledged with the reporter's agreement; private report details are not included here. |
 | [@SimeonPoot](https://github.com/SimeonPoot) | Discovered the session-policy privilege escalation in service accounts and STS (CVE-2025-62506) | Publicly credited on upstream [GHSA-jjjj-jwhf-8rgr](https://github.com/advisories/GHSA-jjjj-jwhf-8rgr); inherited in SILO from [c1a49490](https://silo.pgsty.com/about/security-advisories/#cve-2025-62506). |
 | [@KoreaSecurity](https://github.com/KoreaSecurity) | Discovered the OIDC JWT algorithm confusion vulnerability (CVE-2026-33322) | Publicly credited on upstream [GHSA-5cx5-wh4m-82fh](https://github.com/advisories/GHSA-5cx5-wh4m-82fh); remediated in SILO in [d24f449e0](https://silo.pgsty.com/about/security-advisories/#cve-2026-33322). |
-| [@XlabAITeam](https://github.com/XlabAITeam) | Discovered the S3 Select oversized record memory exhaustion vulnerability (CVE-2026-39414) | Publicly credited on upstream [GHSA-h749-fxx7-pwpg](https://github.com/advisories/GHSA-h749-fxx7-pwpg); remediated in SILO in [3252d5b7f and 5dc705936](https://silo.pgsty.com/about/security-advisories/#cve-2026-39414). |
+| [@XlabAITeam](https://github.com/XlabAITeam) | Discovered the S3 Select oversized record memory exhaustion vulnerability (CVE-2026-39414) | Publicly credited on upstream [GHSA-h749-fxx7-pwpg](https://github.com/advisories/GHSA-h749-fxx7-pwpg); remediated in SILO in [3252d5b7f and fd69c89d0](https://silo.pgsty.com/about/security-advisories/#cve-2026-39414). |
 | [@ddd](https://github.com/ddd) | Discovered the Snowball auto-extract and unsigned-trailer query authentication bypasses (CVE-2026-40344, CVE-2026-41145) | Publicly credited on upstream [GHSA-9c4q-hq6p-c237](https://github.com/advisories/GHSA-9c4q-hq6p-c237) and [GHSA-hv4r-mvr4-25vw](https://github.com/advisories/GHSA-hv4r-mvr4-25vw); remediated in SILO in [efb6e5b00](https://silo.pgsty.com/about/security-advisories/#cve-2026-40344) and [f444b6f37](https://silo.pgsty.com/about/security-advisories/#cve-2026-41145). |
 | [@adrian-doyensec](https://github.com/adrian-doyensec) | Reported the internode ReadMultiple msgpack path traversal (CVE-2026-42600) | Publicly credited on upstream [GHSA-xh8f-g2qw-gcm7](https://github.com/advisories/GHSA-xh8f-g2qw-gcm7); remediated in SILO in [73ac52472](https://silo.pgsty.com/about/security-advisories/#cve-2026-42600) and followed by the [SN-2026-002](https://silo.pgsty.com/about/security-advisories/#sn-2026-002) internode containment audit. |
 | [@mosesdd](https://github.com/mosesdd) | Requested a maintained Helm chart | Closed issues: [pgsty/silo#1](https://github.com/pgsty/silo/issues/1) |