George Chen

Taiga < 6.10.2 - Unauthorized Due-Date Creation via API Viewsets

Dapr - OIDC Discovery Issuer and JWKS URI Injection via Unvalidated X-Forwarded-Host

LobeChat < 2.2.10-canary.18 - SSRF via importFromUrl and fetchImageFromUrl

Pathway - Unauthenticated Denial of Service via Exponential Glob Pattern Matching in Document Store

Weaviate < 1.38.0 - Privilege Escalation via Unchecked Permissions in RBAC Role Assignment

JuiceFS - Authentication Bypass via pprof and metrics Endpoints

LobeChat 2.2.9 - Broken Object-Level Authorization in Message Sub-Resource Writes

RAGFlow < 0.26.3 - Stored Cross-Site Scripting via Agent Pipeline Node Name

LobeChat < 2.2.10-canary.15 - Regular Expression Denial of Service in GitHub Skill Import

NocoBase 2.1.20 Server-Side Request Forgery via serverRequest wrapper