← All credits
George Chen
510 vulnerability records and advisories credit this contributor.
CVE-2026-63086
text-generation-inference 3.3.7 SSRF via fetch_image in multimodal chat completions
CVE-2026-58658
GPUStack Unauthenticated Information Disclosure via Worker Endpoints
CVE-2026-58660
Kanboard BoardAjaxController Missing Ownership Check via Drag-and-Drop
CVE-2026-62242
Spring Boot Admin Server < 4.1.2 SSRF via Unauthenticated Instance Registration
CVE-2026-61459
MCP Server Kubernetes < 3.9.0 Argument Injection via kubectl Structured Tools
CVE-2026-59802
PasswordPusher < 2.8.1 - Redirect-Based XSS via data URI in URL Push Payload
CVE-2026-59101
AutoBangumi < 3.2.8 - SSRF via /api/v1/setup/test-downloader
CVE-2026-59100
LobeChat 2.2.9 - Broken Object Level Authorization via Chat-Group Agent Operations
CVE-2026-59099
Apereo CAS 7.3.0 < 8.0.0-RC6 - AES-GCM Nonce Reuse Information Disclosure
CVE-2026-59098
LobeChat 2.2.9 - Cross-User Document Disclosure via Unscoped RAG Semantic Search