← All credits
George Chen
624 vulnerability records and advisories credit this contributor.
CVE-2026-81035
Midday Missing Owner Check on Team Deletion
CVE-2026-81030
Mage AI through 0.9.79 Arbitrary File Read via Unvalidated Path in browser_items Endpoint
CVE-2026-80050
ContiNew Admin through 4.1.0 Missing Authorization and File-Type Allowlist on Multipart Upload Endpoints
CVE-2026-80349
TarsWeb through 3.0.14 Authentication Bypass via Spoofed X-Forwarded-For and uid Parameter
CVE-2026-80347
mcp-fetch through 1.6.3 Server-Side Request Forgery via Unstripped IPv6 Literal Brackets
CVE-2026-80049
Airbyte Platform through 2.0.0 Cross-Workspace Authorization Bypass via Caller-Supplied workspaceId
CVE-2026-79787
Alluxio through 2.9.5 S3 REST Proxy Authentication Bypass via Unverified Request Signature
CVE-2026-78205
BentoML 1.4.19 through 1.4.39 Server-Side Request Forgery via Unfiltered RFC 6598 Shared Address Space
CVE-2026-76072
Continue CLI through 1.5.47 Incomplete Destructive Command Denylist in Headless and Auto Mode
CVE-2026-78204
Ghostwriter through 7.2.6 Missing Authorization on Report Template Lint Endpoints