← All credits
Chia Min Jun Lennon
79 vulnerability records and advisories credit this contributor.
CVE-2026-58171
Vibe-Trading < 0.1.10 - Path Traversal via Swarm Run Identifier
CVE-2026-58170
Vibe-Trading < 0.1.10 - Path Traversal in Proposal Identifier Allows Forging Live Trading Mandates
CVE-2026-58169
Vibe-Trading < 0.1.10 - Loopback Trust and Missing Host Validation Enable DNS-Rebinding Authentication Bypass and Remote Code Execution
CVE-2026-58168
DeepTutor < 1.4.10 - Insecure Default Grants Unrestricted MCP Tool Access to Non-Admin Users
CVE-2026-56696
OpenHarness - Prompt Injection via /issue and /pr_comments Slash Commands
CVE-2026-56695
OpenHarness - Cross-Session Disclosure via /resume and /summary Commands
CVE-2026-53782
Summarize < 0.17.0 SSRF via podcast:transcript URL fetch
CVE-2026-53781
Summarize < 0.17.0 Disk Exhaustion via Uncapped Media Download
CVE-2026-49973
Hermes WebUI < 0.51.358 Unauthenticated Password Takeover via /api/settings
CVE-2026-49959
Hermes WebUI < 0.51.311 RCE via Git Configuration Injection