← All credits
Yu_Bao (VulDB User)
29 vulnerability records and advisories credit this contributor.
CVE-2026-6874
ericc-ch copilot-api Header token dns rebinding
CVE-2026-6662
ericc-ch copilot-api Token Endpoint server.ts cors cross-domain policy
CVE-2026-6130
chatboxai chatbox Model Context Protocol Server Management System ipc-stdio-transport.ts StdioClientTransport os command injection
CVE-2026-6126
zhayujie chatgpt-on-wechat CowAgent Administrative HTTP Endpoint missing authentication
CVE-2026-6119
AstrBotDevs AstrBot API Endpoint post_data.get server-side request forgery
CVE-2026-6118
AstrBotDevs AstrBot MCP Endpoint tools.py add_mcp_server command injection
CVE-2026-6117
AstrBotDevs AstrBot install-upload Endpoint plugin.py install_plugin_upload sandbox
CVE-2026-5998
zhayujie chatgpt-on-wechat CowAgent API Memory Content Endpoint service.py dispatch path traversal
CVE-2026-5321
vanna-ai vanna FastAPI/Flask Server cross-domain policy
CVE-2026-5320
vanna-ai vanna Chat API Endpoint v2 missing authentication