← All credits
George Chen
617 vulnerability records and advisories credit this contributor.
CVE-2026-57946
Invidious - Private Playlist Disclosure via Unauthenticated RSS Feed Endpoint
CVE-2026-57945
PhotoPrism - Unauthorized User Profile Modification via PUT /api/v1/users/{uid} Endpoint
CVE-2026-57943
LibrePhotos < 1.0.0 - Insecure Direct Object Reference in SetPhotosShared Endpoint
CVE-2026-57942
LibreTranslate - IP Spoofing via X-Forwarded-For Header
CVE-2026-56783
Parseable < 2.9.2 - Cleartext Credential Exposure in Notification Target API
CVE-2026-56782
Gorse - Unauthenticated Database Dump and Restore via /api/dump and /api/restore Endpoints
CVE-2026-56781
Teable - Unauthenticated Hidden Field Disclosure via Projection Parameter Override
CVE-2026-56780
Modoboa < 2.9.0 - Insecure Direct Object Reference in Account Password Change API
CVE-2026-56779
MaxKB < 2.10.0 - Server-Side Request Forgery via downloadCallbackUrl and download_url Parameters
CVE-2026-56774
Kanboard - Cross-User Deletion of Persistent Login Sessions via Unvalidated Session ID