← All credits
Chia Min Jun Lennon
79 vulnerability records and advisories credit this contributor.
CVE-2026-58168
DeepTutor < 1.4.10 - Insecure Default Grants Unrestricted MCP Tool Access to Non-Admin Users
CVE-2026-56696
OpenHarness - Prompt Injection via /issue and /pr_comments Slash Commands
CVE-2026-56695
OpenHarness - Cross-Session Disclosure via /resume and /summary Commands
CVE-2026-53870
Hermes Agent < 0.16.0 - Sensitive File Permission Vulnerability in Store Files
CVE-2026-53869
Hermes Agent < 0.16.0 - DNS Rebinding Bypass via WebSocket Endpoints
CVE-2026-53782
Summarize < 0.17.0 SSRF via podcast:transcript URL fetch
CVE-2026-53781
Summarize < 0.17.0 Disk Exhaustion via Uncapped Media Download
CVE-2026-49973
Hermes WebUI < 0.51.358 Unauthenticated Password Takeover via /api/settings
CVE-2026-49959
Hermes WebUI < 0.51.311 RCE via Git Configuration Injection
CVE-2026-49958
Hermes WebUI < 0.51.303 TOCTOU Race Condition via git_discard