← All credits
George Chen
618 vulnerability records and advisories credit this contributor.
CVE-2026-86118
gonic before 0.22.0 Missing Administrator Check on the Subsonic startScan Endpoint
CVE-2026-86117
Coolify through 4.3.17 OAuth Account Takeover via Unverified Email Matching
CVE-2026-86116
Metabase before 0.63.1 Missing Function-Level Authorization on the Glossary Management API
CVE-2026-86115
Sim before 0.8.14 Confused Deputy in Tool URL Routing Mints an Internal Token for a User-Supplied /api/ Path
CVE-2026-86114
Arcane before 2.0.0 Missing Administrator Authorization on the Compose Template Mutation Endpoints
CVE-2026-86113
BookWyrm through 0.9.1 Insecure Direct Object Reference in edit-readthrough Allows Tampering with Other Users' Reading Records
CVE-2026-86112
BookWyrm through 0.9.1 Missing Authorization on the Favorite and Unfavorite Endpoints
CVE-2026-86111
BookWyrm through 0.9.1 Insecure Direct Object Reference in EditStatus Exposes Followers-Only and Direct Statuses
CVE-2026-85214
vhr Missing Authorization in PUT /hr/info Allows Arbitrary Profile Overwrite
CVE-2026-85213
Kill Bill through 0.24.21 Missing Authorization on AdminResource Endpoints