← All credits
George Chen
617 vulnerability records and advisories credit this contributor.
CVE-2026-91993
Jpom through 2.11.12 Workspace Isolation Bypass via /build/branch-list
CVE-2026-91925
Polyaxon through 2.16.4 Server-Side Template Injection via Unsandboxed Jinja2 Engine
CVE-2026-91924
pgweb through 0.17.0 Missing Authorization on Direct Connect Endpoint
CVE-2026-91923
KubeSphere through 4.1.3 SSRF via git credential verification endpoint
CVE-2026-91922
Steedos Platform through 3.0.15-beta.47 Reflected XSS via page render
CVE-2026-91774
Yao through v1.0.0-rc22 Missing Authorization via OpenAPI team endpoint
CVE-2026-91773
Soft Serve 0.7.1 through 0.11.6 Information Disclosure via LFS Locks
CVE-2026-91772
Halo through 2.26.1 Open Redirect via Unvalidated URI Parameter
CVE-2026-91771
Weights & Biases wandb before 0.29.0 Path Traversal via File Download
CVE-2026-91770
IceHRM before 36.0.0 Broken Access Control via Employee ID