01 / Open-source tool
Language-based fuzzing
Fandango ↗
A test generator that combines grammars with Python constraints and evolutionary search.
Impact
Projects, fixes,
and reports.
Thesis research software, selected fixes in other projects, public security advisories, awards, and research funding.
02 / Open-source tool
Feature-focused testing
Compás ↗
A prototype for narrowing a grammar to the features a tester wants to exercise.
03 / Open-source tool
Reusable input specifications
Fanbase ↗
A public collection of Fandango specifications for file formats, with a CLI for finding and installing them.
Open-source reach
Software reach.
174
GitHub stars
Across my 36 public, non-fork repositories in my account and the Fandango organization I founded.
202,253
Software downloads, all time
PyPI downloads for every package on my maintainer profile, the public Fandango package on GitHub, and release assets across my public repositories. These are download events, not unique users.
Snapshot checked 4 November 2026.
External repositories
Bug & security fixes.
tensorflow/tensorflow
Fix int16 overflow in GatherNd
Merged PR #129560 · rejects index counts that overflow the kernel type
EsotericSoftware/kryo
Guard deserialization against unbounded allocation
Merged PR #1284 · validates declared sizes before allocating
J-F-Liu/lopdf
Bound PDF array and dictionary nesting
Merged PR #503 · fixes the parser stack overflow in RUSTSEC-2026-0187
py-pdf/pypdf
Fix xref recovery on malformed PDFs
Merged PR #3841 · prevents an UnboundLocalError during recovery
Published records only
Security advisories.
CVE-2026-77429↗
TwelveMonkeys ImageIO
Uncontrolled allocation from raster dimensions
Public advisory · credited reporterCVE-2026-77301↗
adm-zip
Uncontrolled allocation from a declared ZIP size
Public advisory · credited reporterCVE-2026-62297↗
ag-psd
Uncontrolled allocation from PSD dimensions
Public advisory · credited reporterCVE-2026-59991↗
psd-tools
Uncontrolled allocation from crafted PSD geometry
Public advisory · credited reporterRUSTSEC-2026-0187↗
lopdf
Stack overflow from deeply nested PDF objects
RustSec vulnerability · report and fixGO-2026-5781↗
rsc.io/pdf
Stack overflow from deeply nested PDF objects
Go vulnerability database · credited reporterRUSTSEC-2026-0192↗
ttf-parser
Unmaintained package notice
RustSec informational notice · submitted advisoryProject-level package downloads and GitHub stars checked 4 November 2026. Download events include repeat and automated installs; neither metric counts affected installations. Public lifetime downloads are unavailable for the Java and Go projects. npm’s adm-zip history starts in 2015.
Research support
Funding raised.
$70kUSD
I secured this funding to continue my work on faster input generation, feature-focused test suites, and open tools for testing complex software.
Recognition
Awards.
2026
Announcement pending
2023Announcement pending
Details will be published after 12 November 2026.
University of Seville
Master’s Thesis Honors Distinction (Best)
Read the XatkitSPL paper in the SISTEDES library.
University of Seville
Bachelor’s Thesis Honors Distinction (Top 5%)
Read the WebSPL paper in the SISTEDES library.