← All credits
George Chen
617 vulnerability records and advisories credit this contributor.
CVE-2026-63768
cal.diy 6.2.0 Conferencing OAuth Callback Open Redirect via Unsigned State
CVE-2026-63765
Chatwoot < 4.16.0 Unauthenticated ActiveStorage Direct Upload Arbitrary Blob Creation
CVE-2026-62240
CrewAI < 1.15.1 SSRF Filter Bypass via HTTP Redirect in Scrape Tools
CVE-2026-59712
Leantime - JSON-RPC API Broken Access Control via users.getUser
CVE-2026-92795
Coze Studio through 0.5.1 Server-Side Request Forgery via Plugin
CVE-2026-92790
Higress before 2.2.4 Rate Limit Bypass via Malformed Cookie Header
CVE-2026-92785
Angel through 3.3.0 Unauthenticated Kryo Deserialization of Arbitrary Classes
CVE-2026-92780
KnowStreaming through 3.4.1 Missing Authorization on the REST API
CVE-2026-92774
Wiki.js through 2.5.314 Authorization Bypass via GraphQL Tag Omission
CVE-2026-92765
ArcherySec through 2.0.6 Information Disclosure via WebScanVulnList