geochen (VulDB User)

modelcontextprotocol mcp-server-fetch/mcp-server-everything Fetch Tool server.py fetch_url server-side request forgery

calcom cal.diy PBAC Permission BookingAccessService.ts doesUserIdHaveAccessToBooking authorization

immich-app Immich Shared Link Preview access.ts checkSharedLinkAccess improper authorization

Pixelfed OAuth Scope ApiV1Controller.php instancePeers missing authentication

NginxProxyManager nginx-proxy-manager Validate Route certificate.js internalCertificate.validate missing authentication

mealie-recipes Mealie Recipe Action Trigger controller_group_recipe_actions.py payload.model_dump server-side request forgery

chatwoot Shopify OAuth callbacks_controller.rb server-side request forgery

cheshire-cat-ai Cheshire Cat AI custom_auth_handler.py _authorize_http_key missing authentication

StackStorm st2 NoOp RBAC backend actionexecutions.py privileges management

StackStorm st2 API Key auth.py privileges management