← All credits
Yu_Bao (VulDB User)
29 vulnerability records and advisories credit this contributor.
CVE-2026-6119
AstrBotDevs AstrBot API Endpoint post_data.get server-side request forgery
CVE-2026-6118
AstrBotDevs AstrBot MCP Endpoint tools.py add_mcp_server command injection
CVE-2026-6130
chatboxai chatbox Model Context Protocol Server Management System ipc-stdio-transport.ts StdioClientTransport os command injection
CVE-2026-6126
zhayujie chatgpt-on-wechat CowAgent Administrative HTTP Endpoint missing authentication
CVE-2026-5998
zhayujie chatgpt-on-wechat CowAgent API Memory Content Endpoint service.py dispatch path traversal
CVE-2026-5625
assafelovic gpt-researcher WebSocket researcher.py cross site scripting
CVE-2026-5321
vanna-ai vanna FastAPI/Flask Server cross-domain policy
CVE-2026-5320
vanna-ai vanna Chat API Endpoint v2 missing authentication
CVE-2026-5258
Sanster IOPaint File Manager file_manager.py _get_file path traversal
CVE-2026-5000
PromtEngineer localGPT API Endpoint server.py LocalGPTHandler missing authentication