← All credits
George Chen
510 vulnerability records and advisories credit this contributor.
CVE-2026-80347
mcp-fetch through 1.6.3 Server-Side Request Forgery via Unstripped IPv6 Literal Brackets
CVE-2026-80049
Airbyte Platform through 2.0.0 Cross-Workspace Authorization Bypass via Caller-Supplied workspaceId
CVE-2026-79787
Alluxio through 2.9.5 S3 REST Proxy Authentication Bypass via Unverified Request Signature
CVE-2026-78205
BentoML 1.4.19 through 1.4.39 Server-Side Request Forgery via Unfiltered RFC 6598 Shared Address Space
CVE-2026-76072
Continue CLI through 1.5.47 Incomplete Destructive Command Denylist in Headless and Auto Mode
CVE-2026-78204
Ghostwriter through 7.2.6 Missing Authorization on Report Template Lint Endpoints
CVE-2026-63770
Glance 0.8.5 IP Spoofing Authentication Brute-Force Protection Bypass
CVE-2026-77768
OpenPanel report.get Returns Any Report by Identifier Without Checking Project Access
CVE-2026-77767
Reconmap Report Preview Endpoint Is Marked AllowAnonymous, Exposing Every Project and Client Organisation Without Authentication
CVE-2026-75483
powerlevel10k Control Character Injection via package.json Version