← All credits
George Chen
617 vulnerability records and advisories credit this contributor.
CVE-2026-65702
Vanna 2.0.2 Path Traversal via FileSystemConversationStore
CVE-2026-63087
Grafana OnCall 1.16.11 Unauthenticated Token Hijack via Plugin Install Endpoint
CVE-2026-63767
ktransformers Unauthenticated Pickle Deserialization RCE via ZMQ
CVE-2026-63730
HyperDX < 2.31.0 SSRF via Webhook Test Endpoint
CVE-2026-63100
Maybe 0.6.0 Missing Authorization via HostingsController show/update
CVE-2026-63101
Open Event Server 1.19.1 Unauthenticated Member Roster Export via CSV Export Endpoint
CVE-2026-63086
text-generation-inference 3.3.7 SSRF via fetch_image in multimodal chat completions
CVE-2026-62242
Spring Boot Admin Server < 4.1.2 SSRF via Unauthenticated Instance Registration
CVE-2026-59802
PasswordPusher < 2.8.1 - Redirect-Based XSS via data URI in URL Push Payload
CVE-2026-58580
LobeChat 2.2.9 - Broken Object-Level Authorization in Message Sub-Resource Writes