George Chen

Determined Missing Authorization Check on Generic Task Endpoints

Next Terminal Missing Per-Asset Authorization on Portal Endpoints

OpnForm Editable Submission Secret Derivation via Empty Hashids Salt

phpIPAM Temporary Subnet Share Information Disclosure via Address Parameter

Hugging Face Transformers Path Traversal via Checkpoint Index

Crawlab Missing Authorization on Password Change Endpoint Allows Account Takeover

gdu Terminal Injection via Unstripped Escape Sequences

dua-cli Terminal Escape Sequence Injection via Marked Paths

streama Insecure Direct Object Reference via ViewingStatusController

langchain-community SitemapLoader Does Not Apply restrict_to_same_domain to Nested Sitemap Index Entries, Allowing Server-Side Request Forgery