George Chen

TEN Framework 0.11.71 Unauthenticated File Read/Write via TMAN Designer

Chatbot UI Cross-User Private File Content Disclosure via Retrieval API

Turso through 0.8.0-pre.8 Out-of-Bounds Read Denial of Service

ntopng before 6.7.260717 Missing Authorization on the Notification Endpoint and Recipient Delete Handlers

Meshery < 1.0.57 Unauthenticated Arbitrary File Read via fileView and fileDownload

Worklenz before 3.0.0 Authorization Bypass on Task-Scoped Endpoints

python-jose through 3.5.0 Algorithm Confusion via DER-encoded Public Key as HMAC Secret

ConvertX 0.17.0 Arbitrary File Read via LaTeX Input Directives

goose 1.37.0 Arbitrary Command Execution via Recipe Extensions

Trigger.dev before 4.5.2 Unauthorized Environment Access via Run Replay