← All credits
George Chen
510 vulnerability records and advisories credit this contributor.
CVE-2026-59708
Ghostfolio - Unauthorized Portfolio Data Exposure via Public Endpoint
CVE-2026-59707
LocalAI - Server-Side Request Forgery via POST /models/apply
CVE-2026-59706
mem0 - Unauthenticated Config API Exposure and SSRF via ollama_base_url
CVE-2026-59705
mem0 - OpenMemory API Unauthenticated Access via Memory Endpoints
CVE-2026-59704
Cap - Missing Access Control in Video AI Metadata Endpoint
CVE-2026-59703
repomix - Local File Inclusion via file:// URL Scheme in Git Clone Endpoint
CVE-2026-59702
repomix - Server-Side Request Forgery via Unvalidated Repository URLs in POST /api/pack
CVE-2026-59262
AFFiNE - Unauthorized Document Edit History Access via GraphQL histories Field
CVE-2026-56259
Crawl4AI - LLM Credential Exfiltration via base_url and Environment Variable Resolution
CVE-2026-93660
SQLBot through 1.10.1 Improper Access Control via Dashboard Update