← All credits
George Chen
513 vulnerability records and advisories credit this contributor.
CVE-2026-92801
cc-connect through 1.5.0 User Allowlist Bypass via Feishu Card Actions
CVE-2026-92806
phpList before 3.6.17 Cross-Site Request Forgery via massremove.php
CVE-2026-92813
Metabase through 0.63.18 SSRF via GeoJSON URL validation bypass
CVE-2026-85606
firecrawl-mcp-server 3.20.2 Arbitrary Local File Read via filePath
CVE-2026-85620
Postgres MCP Pro 0.3.0 Restricted-Mode Bypass via FROM-Clause Function
CVE-2026-85625
sift 17.1.3 Prototype Pollution Remote Code Execution via $where
CVE-2026-85661
excel-mcp-server 0.1.8 Arbitrary File Read/Write via stdio mode
CVE-2026-85666
ogx 1.3.1 Server-Side Request Forgery via MCP tool server_url
CVE-2026-85671
QAnything 2.0.0 Unauthenticated Cross-User File Disclosure
CVE-2026-85676
Dub Open Redirect via Unrestricted redir_url Parameter