George Chen

Ollama Remote Denial of Service via Attacker-Controlled Allocation in GGUF Metadata Parser

Electric Postgres Sync Excluded-Column Value Inference via Subset Where Clauses

Taiga taiga-back Private Project Member Roster Disclosure via Unauthenticated filters_data Endpoints

MediaCMS Private Media Metadata Disclosure via Playlist Ownership Loophole

Huginn < 2026.09.09 SSRF via ScenarioImport fetch_url Method

SurrealDB < 3.1.5 Information Disclosure via ORDER BY

Helm Files.Lines Denial of Service via Empty Chart Files

Chat2DB < 5.3.0 Insecure Direct Object Reference via GET /api/connection/datasource

SigNoz < 0.134.0 SSO OAuth State Manipulation Session Token Theft

WireGuard Easy Weak Token Generation Information Disclosure via OTL Route