← All credits
George Chen
617 vulnerability records and advisories credit this contributor.
CVE-2026-58446
Presenton < 0.8.8-beta - Authentication Bypass of Session Auth via Unprotected MCP Endpoint
CVE-2026-58377
JeecgBoot 3.9.2 - Missing Authorization on OpenAPI Credential Management Endpoints Exposes Access/Secret Keys
CVE-2026-58376
Dolibarr - SQL Injection via sqlfilters Parameter in Multiple REST API List Endpoints
CVE-2026-58375
JimuReport 2.5.0 - Unauthenticated Report Export via /jmreport/auto/export
CVE-2026-58373
CVAT < 2.69.0 - Missing Authorization on Quality Reports parent_id Filter Leaks Cross-Organization Report Existence
CVE-2026-58372
SeaweedFS < 4.34 - Cross-Bucket Object Deletion via DeleteObjects Request-Body Keys
CVE-2026-58371
SeaweedFS < 4.30 - Cross-Origin Information Disclosure via Unvalidated JSONP callback Parameter
CVE-2026-58370
Woodpecker < 3.15.0 - GitLab Approval Gate Bypass via Spoofable Commit Author Name
CVE-2026-58369
Woodpecker < 3.15.0 - Unauthenticated NULL Pointer Dereference in /api/orgs/lookup Enables Log-Flooding Denial of Service
CVE-2026-58176
RuoYi-Vue-Plus - Missing Authorization on Workflow Task Management Endpoints