← All credits
George Chen
617 vulnerability records and advisories credit this contributor.
CVE-2026-58660
Kanboard BoardAjaxController Missing Ownership Check via Drag-and-Drop
CVE-2026-58659
PyTorch Lightning Arbitrary Code Execution via _instantiator Hyperparameter
CVE-2026-58658
GPUStack Unauthenticated Information Disclosure via Worker Endpoints
CVE-2026-58579
RAGFlow < 0.26.3 - Stored Cross-Site Scripting via Agent Pipeline Node Name
CVE-2026-58578
LobeChat < 2.2.10-canary.15 - Regular Expression Denial of Service in GitHub Skill Import
CVE-2026-58468
NocoBase 2.1.20 Server-Side Request Forgery via serverRequest wrapper
CVE-2026-58466
AutoBangumi < 3.2.8 - Hard-coded Default Credentials via add_default_user()
CVE-2026-58450
Invoice Ninja 5.13.26 - Open Redirect in Client Portal Login via intended Parameter
CVE-2026-58448
yudao-cloud < 2026.06 - BPM Module Broken Access Control via process-instance API
CVE-2026-58447
Invidious - Cross-User Playlist Video Deletion via Missing Ownership Check