← All credits
George Chen
510 vulnerability records and advisories credit this contributor.
CVE-2026-65314
Electric Postgres Sync Excluded-Column Value Inference via Subset Where Clauses
CVE-2026-65057
Keep Unauthenticated Server-Side Request Forgery via POST /providers/healthcheck
CVE-2026-65056
mcp-webresearch Server-Side Request Forgery in visit_page Due to Missing Internal-IP Filtering
CVE-2026-65055
Taiga taiga-back Private Project Member Roster Disclosure via Unauthenticated filters_data Endpoints
CVE-2026-65054
MediaCMS Private Media Metadata Disclosure via Playlist Ownership Loophole
CVE-2026-63769
Huginn < 2026.09.09 SSRF via ScenarioImport fetch_url Method
CVE-2026-61463
Shiori Authenticated Privilege Escalation via PATCH /api/v1/auth/account
CVE-2026-61462
mcp-gitlab Path Traversal via job_id Parameter
CVE-2026-59713
Leantime - OIDC Login CSRF via Unconditional State Verification Stub
CVE-2026-59709
Ghostfolio - Unauthorized Portfolio Holding Tag Modification via Missing Permission Check