← All credits
George Chen
617 vulnerability records and advisories credit this contributor.
CVE-2026-85608
Douyin_TikTok_Download_API 4.1.2 SSRF via url parameter
CVE-2026-85622
AppFlowy-Cloud through 0.9.64 Cross-Workspace Collab Read via WebSocket
CVE-2026-85650
Trigger.dev before 4.5.2 Server-Side Request Forgery via webhook alert-channel
CVE-2026-85663
Aim 3.29.1 Remote Code Execution via Unauthenticated Method Dispatch
CVE-2026-85668
Xinference 3.3.0 Unauthenticated Arbitrary-Path File Read via /v1/models/llm/auto-register
CVE-2026-85673
LLaMA-Factory SSRF Guard Bypass via Redirect and DNS Rebinding
CVE-2026-85685
AgentScope through 2.0.7.post1 Arbitrary Directory Copy via add_skill
CVE-2026-85690
Plandex 2.2.1 Path Traversal via ApplyFiles
CVE-2026-85700
Onyx 4.6.6 Custom Tool Secret Header Disclosure via Tool Endpoints
CVE-2026-85392
Peppermint through 0.5.5 Authorization Bypass on the User Logout Endpoint