← All credits
George Chen
617 vulnerability records and advisories credit this contributor.
CVE-2026-72741
Rainbond 6.9.7 Region API Cross-Enterprise IDOR via Tenant Access
CVE-2026-67179
Genkit improper host header validation
CVE-2026-67180
Google Turbinia arbitrary command execution
CVE-2026-69113
Cap v0.3.1 Broken Access Control via video comment endpoint
CVE-2026-73481
phpList < 3.7.0-RC5 Cross-Site Request Forgery via Bounce Rules
CVE-2026-73038
NodeBB < 4.15.0 Stored XSS via ActivityPub emoji tag.icon.url and tag.name
CVE-2026-73034
DB-GPT v0.8.1 Path Traversal Arbitrary File Write via user_id Header
CVE-2026-67347
Vendure 3.7.1 Cross-Channel Authorization Bypass via StockLocation and Asset Update
CVE-2026-67345
MaxKey 4.1.12 DefaultRedirectResolver OAuth Authorization Code Theft
CVE-2026-72742
DSPy 3.3.0b1 Local File Read via Image/Audio Output Field Parsing