← All credits
George Chen
617 vulnerability records and advisories credit this contributor.
CVE-2026-110104
novel through 3.5.0 Unsalted MD5 Password Storage
CVE-2026-108159
AstronRPA through 1.1.6 RCE via Smart-Component Chat XSS and IPC Bridge
CVE-2026-109965
Serena before 2.0.0 Symlink Following in File Tools Allows Access Outside Project Root
CVE-2026-108555
PairDrop through 1.11.2 IP Spoofing via cf-connecting-ip Header
CVE-2026-108549
cc-connect through 1.5.0 Missing Authentication via MAX Webhook Sender Spoofing
CVE-2026-108160
AstronRPA through 1.1.6 Unsigned Update Installation via Plain-HTTP Feed
CVE-2026-85210
Oppia through 3.5.2 Missing Authorization on AdminRoleHandler GET
CVE-2026-72846
Lightdash Scheduled Delivery Webhook URLs Are Not Validated, Allowing Server-Side Request Forgery
CVE-2026-76835
OAuth2 Proxy 7.15.2 through 7.15.4 Authentication Bypass via X-Forwarded-Uri Under the Default Trusted Proxy Set
CVE-2026-61462
mcp-gitlab Path Traversal via job_id Parameter