George Chen

JuiceFS Local Filestore Backend Joins Object Keys onto the Storage Root Without a Containment Check, Allowing Writes Outside the Configured Directory

Pydio Cells 5.0.0 to 5.0.2 - Missing Authorization on the Share Link REST Handler

Bastillion Authentication Bypass via Path-Prefix Routing Mismatch

SpiderFoot Stored Cross-Site Scripting via Correlation Titles

SWE-agent Trajectory Inspector Path Traversal File Disclosure

SkyPilot Authentication Bypass via Service Account Role Escalation

OpenViking Debug Vector Endpoints Multi-tenant Data Exposure

JimuReport Unauthenticated Report Listing and Share Token Disclosure

Evidently UI Path Traversal via Dataset Materialization Filename

MemOS Authentication Bypass via Unset INTERNAL_SERVICE_SECRET