← All credits
George Chen
617 vulnerability records and advisories credit this contributor.
CVE-2026-80049
Airbyte Platform through 2.0.0 Cross-Workspace Authorization Bypass via Caller-Supplied workspaceId
CVE-2026-79787
Alluxio through 2.9.5 S3 REST Proxy Authentication Bypass via Unverified Request Signature
CVE-2026-78205
BentoML 1.4.19 through 1.4.39 Server-Side Request Forgery via Unfiltered RFC 6598 Shared Address Space
CVE-2026-76072
Continue CLI through 1.5.47 Incomplete Destructive Command Denylist in Headless and Auto Mode
CVE-2026-78204
Ghostwriter through 7.2.6 Missing Authorization on Report Template Lint Endpoints
CVE-2026-63770
Glance 0.8.5 IP Spoofing Authentication Brute-Force Protection Bypass
CVE-2026-75483
powerlevel10k Control Character Injection via package.json Version
CVE-2026-61518
ISPConfig Authenticated SQL Injection via Remote API primary_id Parameter
CVE-2026-66399
phpMyFAQ before 4.1.6 Privilege Escalation via Group Membership
CVE-2026-73482
phpList < 3.7.0-RC5 Cross-Site Request Forgery via admins.php