← All credits

George Chen

534 vulnerability records and advisories credit this contributor.

CVE-2026-110240

Lancet through 2.3.9 SSRF Protection Bypass via netutil.IsInternalIP

CVE-2026-108551

openapi-typescript-codegen through 0.31.0 Code Injection via Handlebars Templates

CVE-2026-110104

novel through 3.5.0 Unsalted MD5 Password Storage

CVE-2026-110103

bbs-go through 4.4.6 Stored XSS via Image Upload Content-Type

CVE-2026-110102

powerlevel10k through 1.20.0 Download of Code Without Integrity Check in gitstatus Installer

CVE-2026-108159

AstronRPA through 1.1.6 RCE via Smart-Component Chat XSS and IPC Bridge

CVE-2026-109965

Serena before 2.0.0 Symlink Following in File Tools Allows Access Outside Project Root

CVE-2026-107460

Apache Fesod (Incubating): UrlImageConverter SSRF protection bypass via DNS rebinding

CVE-2026-108555

PairDrop through 1.11.2 IP Spoofing via cf-connecting-ip Header

CVE-2026-108549

cc-connect through 1.5.0 Missing Authentication via MAX Webhook Sender Spoofing