← All credits
geo-chen
12 vulnerability records and advisories credit this contributor.
CVE-2026-121442
Frappe HRMS before 15.61.0 Permission Bypass via Expense Claim Advances API
CVE-2026-119144
Frappe Framework before 15.111.0 and 16.x before 16.21.0 Server-Side Template Injection via Message Fields
CVE-2026-114086
Trigger.dev before 4.5.5 Unauthenticated Realtime Stream Data Injection via Streams Endpoint
CVE-2026-82242
Budibase before 3.41.3 Cross-Application Resource Injection via Missing Authorization
CVE-2026-82239
Budibase before 3.41.3 Authorization Bypass via datasources/query
CVE-2026-103265
Fleet before 4.89.0 Information Disclosure via MDM Command Results
CVE-2026-66083
Apache DolphinScheduler: Unauthorized Disclosure of Data Source Information via /datasources/unauth-datasource
CVE-2026-77067
Omnivore Stored Server-Side Request Forgery via the setWebhook Mutation
CVE-2026-77066
Omnivore Server-Side Request Forgery via the scanFeeds GraphQL Query
CVE-2026-75625
Kraken Agents Peer-to-Peer Download Cache Poisoning via Digest Verification Bypass