geochen (VulDB User)

Michael-A-Kuykendall Shimmy Inference API server.rs missing authentication

donetick History Deletion model.go CanDeleteHistory improper authorization

dotnet eShop Catalog API Extensions.cs AddApplicationServices improper authentication

calcom cal.com/cal.diy Webhook util.ts createWebhookProcedure authorization

sgl-project sglang HTTP Endpoint http_server.py server_info cleartext transmission

OSSRS srs System API api.go systemAPI.Run missing authentication

uptrace user_handler.go Login information exposure

dotnet eShop Ordering API OrdersApi.cs GetOrderAsync resource injection

imgproxy SVG svg.go sanitizeElement cross site scripting

modelcontextprotocol mcp-server-fetch/mcp-server-everything Fetch Tool server.py fetch_url server-side request forgery