George Chen

ConvertX 0.17.0 Arbitrary File Read via LaTeX Input Directives

goose 1.37.0 Arbitrary Command Execution via Recipe Extensions

Trigger.dev before 4.5.2 Unauthorized Environment Access via Run Replay

Chroma 1.5.9 Unbounded HNSW Index Parameters Memory Exhaustion

potpie through 2.0.0 Missing Ownership Check via code-changes sync

aider 0.86.2 Remote Code Execution via .aider.conf.yml

ms-swift 4.5.2 Unauthenticated SSRF via Multimodal Media URLs

MegaParse 0.0.55 Server-Side Request Forgery via POST /v1/url

SadTalker OS Command Injection via Audio Filename

ntopng before 6.7.260717 Missing Authorization on the Host Pool Bulk Delete Handler