← All credits
George Chen
617 vulnerability records and advisories credit this contributor.
CVE-2026-100868
Penpot before 2.18.0 Unauthenticated WebSocket Access via MCP Bridge
CVE-2026-105030
Kener 4.0.0 before 4.1.6 Hidden Monitor Data Disclosure via Dashboard API
CVE-2026-85626
git-mcp-server 2.15.1 Argument Injection via Git Ref Parameters
CVE-2026-85695
FastChat Unauthenticated Worker Registration SSRF and Model Spoofing
CVE-2026-75106
OpnForm Editable Submission Secret Derivation via Empty Hashids Salt
CVE-2026-72848
langchain-community SitemapLoader Does Not Apply restrict_to_same_domain to Nested Sitemap Index Entries, Allowing Server-Side Request Forgery
CVE-2026-72843
EverShop Missing Authorization on PATCH /api/customers/:id Allows Unauthenticated Account Takeover
CVE-2026-66007
Datasets Path Traversal via Unsanitized file_name Metadata
CVE-2026-102877
Fider before 0.38.0 SSRF via DNS rebinding in webhook validation
CVE-2026-101033
KitchenOwl through 0.7.10 IDOR via unchecked category ID