← All credits
George Chen
510 vulnerability records and advisories credit this contributor.
CVE-2026-86116
Metabase before 0.63.1 Missing Function-Level Authorization on the Glossary Management API
CVE-2026-86115
Sim before 0.8.14 Confused Deputy in Tool URL Routing Mints an Internal Token for a User-Supplied /api/ Path
CVE-2026-86114
Arcane before 2.0.0 Missing Administrator Authorization on the Compose Template Mutation Endpoints
CVE-2026-86113
BookWyrm through 0.9.1 Insecure Direct Object Reference in edit-readthrough Allows Tampering with Other Users' Reading Records
CVE-2026-86112
BookWyrm through 0.9.1 Missing Authorization on the Favorite and Unfavorite Endpoints
CVE-2026-86111
BookWyrm through 0.9.1 Insecure Direct Object Reference in EditStatus Exposes Followers-Only and Direct Statuses
CVE-2026-85214
vhr Missing Authorization in PUT /hr/info Allows Arbitrary Profile Overwrite
CVE-2026-85213
Kill Bill through 0.24.21 Missing Authorization on AdminResource Endpoints
CVE-2026-85212
CRMEB through 6.0.0 Missing Authorization via Inert verifyAuth Role Check
CVE-2026-85211
Label Studio through 1.23.0 Cross-Organization Storage URI Resolution