geochen (VulDB User)

sgl-project sglang HTTP Endpoint http_server.py server_info cleartext transmission

OSSRS srs System API api.go systemAPI.Run missing authentication

uptrace user_handler.go Login information exposure

dotnet eShop Ordering API OrdersApi.cs GetOrderAsync resource injection

imgproxy SVG svg.go sanitizeElement cross site scripting

modelcontextprotocol mcp-server-fetch/mcp-server-everything Fetch Tool server.py fetch_url server-side request forgery

ChatGPTNextWeb NextChat Proxy Fallback proxy.ts proxyHandler server-side request forgery

calcom cal.diy PBAC Permission BookingAccessService.ts doesUserIdHaveAccessToBooking authorization

immich-app Immich Shared Link Preview access.ts checkSharedLinkAccess improper authorization

Pixelfed OAuth Scope ApiV1Controller.php instancePeers missing authentication