George Chen

Devtron through 2.2.0 Missing Authorization via webhook API token endpoint

browser-use web-ui 2.0.0 through 3.0.0 Cleartext API Key Storage

NextChat 2.15.8 through 2.16.1 OpenAI API Key Disclosure

jina-ai reader Server-Side Request Forgery via disabled private-address guard

browser-use web-ui 2.0.0 through 3.0.0 Arbitrary Directory Creation

StarRocks Query Detail Endpoint Returns Every User's Query History

HeyForm Reflects Any Origin in CORS Responses While Allowing Credentials

Chainlit Feedback Endpoints Missing Ownership Validation

Gitingest Prefix-Based Git Host Check Enables Request Forgery and Token Disclosure

Stable Diffusion WebUI Credential Disclosure via /sdapi/v1/cmd-flags