← All credits

George Chen

617 vulnerability records and advisories credit this contributor.

Idira Secrets Manager (Self-Hosted): Improper Authorization in REST API

CVE-2026-108550

SkillHub before 0.2.22 Account Takeover via Account Merge Flow

CVE-2026-110103

bbs-go through 4.4.6 Stored XSS via Image Upload Content-Type

CVE-2026-110102

powerlevel10k through 1.20.0 Download of Code Without Integrity Check in gitstatus Installer

CVE-2026-108695

MultiVendorX through 5.0.19 Incorrect Authorization via Settings REST Endpoint

CVE-2026-108554

PDFMathTranslate through 1.9.11 SSRF via Gradio Web GUI Link Input

CVE-2026-108548

AstronRPA through 1.1.6 Authentication Bypass via Arbitrary Bearer Token

CVE-2026-108156

LobsterAI 2026.5.27 through 2026.9.23 Arbitrary Directory Deletion via Skill _meta.json

CVE-2026-110240

Lancet through 2.3.9 SSRF Protection Bypass via netutil.IsInternalIP

CVE-2026-108551

openapi-typescript-codegen through 0.31.0 Code Injection via Handlebars Templates