← All credits

George Chen

617 vulnerability records and advisories credit this contributor.

CVE-2026-123783

Skyvern through 1.0.56 Script Sandbox Bypass via types.CodeType Bytecode

CVE-2026-119704

Bastille through 1.4.4 Jail Escape via Symlink Following in cp, rcp, jcp

CVE-2026-118756

gopass before 1.17.0 Path Traversal via fs Storage Prune and IsDir

CVE-2026-116747

Kener 3.0.0 before 4.1.10 Authentication Bypass via Hardcoded Fallback JWT Secret

CVE-2026-116073

Leon before commit 50df142 Path Traversal via /download model Command

CVE-2026-119703

xiaozhi-esp32-server through 0.9.8 Authentication Bypass via Spoofed Device-ID Header

CVE-2026-116069

NiubiGEO before 0.3.2 Unauthenticated SSRF via /audit-plan domain Field

CVE-2026-121936

easyVoice before 0.0.23 SSRF via openaiBaseUrl in TTS API

CVE-2026-121452

bbs-go through 4.4.6 Improper TLS Certificate Validation in SMTP Email Service

CVE-2026-121543

smart-sso through 2.0.1 Incorrect Authorization in PermissionFilter Enables Admin Escalation