George Chen

WebVirtCloud Missing Authorization on Instance Control Actions

ComfyUI before 0.30.0 Path Traversal via dataset save nodes

Builder.io Gen2 SDKs through 5.2.11 Prototype Pollution via builder.userAttributes

Wiki.js through 2.5.314 Server-Side Request Forgery via Image Prefetch

metasfresh Unauthorized Access via Document Attachments and Comments Endpoints

Harbor through 2.15.2 Scanner Credential Disclosure via Query Parameter

LightGBM through 4.7.0 Out-of-Bounds Write via Crafted Model

Manticore Search 27.0.0 before 28.4.4 Multi-Statement Authorization Bypass

Uber Kraken through 0.1.29 Path Traversal via tag parameter

browserless 1.44.0 through 2.56.7 File Protocol Restriction Bypass