← All credits
George Chen
617 vulnerability records and advisories credit this contributor.
CVE-2026-63088
stoatchat < 0.14.0 SSRF via DNS-based IP Blocklist Bypass
CVE-2026-63085
Axelor Open Platform 8.x < 8.2.2 Authorization Bypass via Nested Relational Record Persistence
CVE-2026-61460
Krayin CRM Insecure Direct Object Reference via Controllers
CVE-2026-61459
MCP Server Kubernetes < 3.9.0 Argument Injection via kubectl Structured Tools
CVE-2026-59807
Composio SDK < 0.2.32-beta.283 - Sensitive File Upload via tool-file-uploads.ts
CVE-2026-59806
Gradio < 6.20.0 - Open Redirect and SSRF via /gradio_api/file= endpoint
CVE-2026-59805
Gumroad < 2026.07.06.2 - Insecure Direct Object Reference in PurchasesController
CVE-2026-59804
Midscene Bridge Server - Session Hijack via Unauthenticated WebSocket
CVE-2026-59803
rpcx - Denial of Service via Gzip Decompression Bomb in Wire Protocol
CVE-2026-59704
Cap - Missing Access Control in Video AI Metadata Endpoint