George Chen

LLaMA-Factory SSRF Guard Bypass via Redirect and DNS Rebinding

AgentScope through 2.0.7.post1 Arbitrary Directory Copy via add_skill

Plandex 2.2.1 Path Traversal via ApplyFiles

FastChat Unauthenticated Worker Registration SSRF and Model Spoofing

Onyx 4.6.6 Custom Tool Secret Header Disclosure via Tool Endpoints

Peppermint through 0.5.5 Authorization Bypass on the User Logout Endpoint

node-forge through 1.4.0 RSA PKCS#1 v1.5 Signature Forgery via Nested DigestAlgorithm Padding

Worklenz through 3.0.0 SQL Injection via the sort-field Query Parameter

Peppermint through 0.5.5 Use of Hard-coded JWT Signing Secret in docker-compose.yml

rubyzip before 3.4.0 Path Traversal in Zip::Entry#extract via Sibling-Directory Prefix