George Chen

APITable through 1.13.0-beta.1 Missing Authentication on the Internal Notification Create Endpoint

Pydio Cells 5.0.0 to 5.0.2 - Missing Authorization on the Share Link REST Handler

Bastillion Authentication Bypass via Path-Prefix Routing Mismatch

SpiderFoot Stored Cross-Site Scripting via Correlation Titles

SWE-agent Trajectory Inspector Path Traversal File Disclosure

SkyPilot Authentication Bypass via Service Account Role Escalation

OpenViking Debug Vector Endpoints Multi-tenant Data Exposure

JimuReport Unauthenticated Report Listing and Share Token Disclosure

Evidently UI Path Traversal via Dataset Materialization Filename

MemOS Authentication Bypass via Unset INTERNAL_SERVICE_SECRET