← All credits
George Chen
513 vulnerability records and advisories credit this contributor.
CVE-2026-63764
LMDeploy Server-Side Request Forgery via HTTP Redirect Bypass
CVE-2026-59258
immich < 3.0.3 Shared Album Editor Ownership Takeover via updateUser
CVE-2026-59255
BloodHound Missing Authorization on Custom Node Management API
CVE-2026-82472
Documenso before 2.13.0 Unauthenticated File Upload via /api/files/upload-pdf
CVE-2026-66005
Jan Local API Server CORS Origin Reflection via 0.0.0.0 Binding
CVE-2026-65918
PyTorch torchvision GIF Decoder Out-of-bounds Heap Read
CVE-2026-65013
Onlook tRPC Insecure Direct Object Reference via multiple procedures
CVE-2026-63768
cal.diy 6.2.0 Conferencing OAuth Callback Open Redirect via Unsigned State
CVE-2026-63765
Chatwoot < 4.16.0 Unauthenticated ActiveStorage Direct Upload Arbitrary Blob Creation
CVE-2026-62240
CrewAI < 1.15.1 SSRF Filter Bypass via HTTP Redirect in Scrape Tools