← All credits
George Chen
617 vulnerability records and advisories credit this contributor.
CVE-2026-85393
node-forge through 1.4.0 RSA PKCS#1 v1.5 Signature Forgery via Nested DigestAlgorithm Padding
CVE-2026-85388
Worklenz through 3.0.0 SQL Injection via the sort-field Query Parameter
CVE-2026-85391
Peppermint through 0.5.5 Use of Hard-coded JWT Signing Secret in docker-compose.yml
CVE-2026-85396
rubyzip before 3.4.0 Path Traversal in Zip::Entry#extract via Sibling-Directory Prefix
CVE-2026-82281
Kotaemon Missing Ownership Check in Conversation Functions
CVE-2026-84700
Pika Unauthenticated Replication Access via Internal Protobuf Port
CVE-2026-84701
NocoBase Rich Text Field Stored Cross-Site Scripting via API
CVE-2026-84702
facefusion before 3.7.0 Path Traversal via Job Identifier
CVE-2026-82475
iFlytek astron-agent through 1.1.1 Workflow Hijacking via Missing Ownership Check
CVE-2026-82476
Memos through 0.30.0 SSRF via Omitted CGNAT Address Range