210892 matches found
GHSA-5M98-CGCR-XX3Q n8n: GitHub Trigger 422 Reuse Path Skips Webhook Secret Storage, Causing Signature Verification to Fail-Open
Impact The GitHub Trigger generated a signing secret when it registered a webhook and verified X-Hub-Signature-256 on each delivery. When GitHub answered the create request with a 422 because a webhook for the URL already existed, the node adopted the remote hook but kept only its id and events,...
EUVD-2026-74269
n8n: Cross-User Active Workflow ID and Lifecycle Event Disclosure via Missing userId Filter...
CVE-2026-63427
An authentication bypass vulnerability was discovered in Lenovo Software Fix that could allow a local authenticated user to perform arbitrary code execution with elevated privileges...
CVE-2026-63427
An authentication bypass vulnerability was discovered in Lenovo Software Fix that could allow a local authenticated user to perform arbitrary code execution with elevated privileges...
EUVD-2026-75750
An authentication bypass vulnerability was discovered in Lenovo Software Fix that could allow a local authenticated user to perform arbitrary code execution with elevated privileges...
CVE-2026-63427
An authentication bypass vulnerability in Lenovo Software Fix allows a local authenticated user with low privileges to achieve arbitrary code execution with elevated privileges . The attack vector is local with low complexity and no user interaction required, yielding HIGH impact across confident...
CVE-2026-9176 IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilities
IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to a security bypass due to improper authentication controls. A local attacker could exploit this vulnerability to escalate privileges and gain unauthorized access to protected resources...
CVE-2026-9176
IBM WebSphere Application Server versions 9.0 and 8.5 are vulnerable to a security bypass caused by improper authentication controls, allowing a local attacker to escalate privileges and gain unauthorized access to protected resources. Affected versions are prior to 9.0.5.29 and 8.5.5.31 . The vu...
CVE-2026-9176 IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilities
IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to a security bypass due to improper authentication controls. A local attacker could exploit this vulnerability to escalate privileges and gain unauthorized access to protected resources...
EUVD-2026-75724
IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to a security bypass due to improper authentication controls. A local attacker could exploit this vulnerability to escalate privileges and gain unauthorized access to protected resources...
EUVD-2026-74279
n8n: Anonymous Approval-Gate Bypass via Reused resumeToken over the Chat WebSocket...
NPM: n8n: Anonymous Approval-Gate Bypass via Reused resumeToken over the Chat WebSocket
NPM: n8n: Anonymous Approval-Gate Bypass via Reused resumeToken over the Chat WebSocket vulnerability discovered by ? in WordPress Npm n8n versions 2.37.7...
n8n: Anonymous Approval-Gate Bypass via Reused resumeToken over the Chat WebSocket
Impact The /chat WebSocket route resumed a paused execution from a resume token without checking that the node being resumed was a chat node. n8n hands that token to anonymous form submitters, so a party with no account could present it on the chat route and release an execution waiting at an...
GHSA-35JJ-42HP-8GMQ n8n: Anonymous Approval-Gate Bypass via Reused resumeToken over the Chat WebSocket
Impact The /chat WebSocket route resumed a paused execution from a resume token without checking that the node being resumed was a chat node. n8n hands that token to anonymous form submitters, so a party with no account could present it on the chat route and release an execution waiting at an...
[SECURITY] [DSA 6492-1] ruby-rack security update
------------------------------------------------------------------------- Debian Security Advisory DSA-6492-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff September 10, 2026 https://www.debian.org/security/faq -...
GHSA-RF44-J88R-HH8C Traefik: ForwardAuth identity spoofing via dot-form header alias
Summary There is a medium severity vulnerability in Traefik's handling of request headers whose name aliases another header name. Go canonicalizes header names on dashes only, so X-Auth-User, XAuthUser and X.Auth.User are three distinct headers to Traefik, while backends that derive variable name...
GHSA-F6MR-PJWC-34M4 Angular: SSRF and Cross-Origin Credential Disclosure via URL Resolution Discrepancy in SSR
Summary A discrepancy between WHATWG URL parsing and Angular SSR's URL resolution allows attackers to bypass same-origin checks and cause Server-Side Request Forgery SSRF, potentially leaking sensitive server-side credentials. Technical Description When applications validate incoming URLs using t...
Angular: SSRF and Cross-Origin Credential Disclosure via URL Resolution Discrepancy in SSR
Summary A discrepancy between WHATWG URL parsing and Angular SSR's URL resolution allows attackers to bypass same-origin checks and cause Server-Side Request Forgery SSRF, potentially leaking sensitive server-side credentials. Technical Description When applications validate incoming URLs using t...
GHSA-P297-FM68-3Q8C Angular: Information Leak via `HttpTransferCache` Bypass When Using `withRequestsMadeViaParent`
A security bypass vulnerability was discovered in @angular/common when Server-Side Rendering SSR and hydration are enabled in applications using a hierarchical HttpClient configuration with withRequestsMadeViaParent. The HttpTransferCache utility optimizes hydration by caching outgoing HTTP...
GHSA-HH8M-FM6V-7CVG Angular: Sanitization bypass via directive host bindings on concrete host elements in @angular/core and @angular/compiler
Angular automatically sanitizes untrusted values bound to security-sensitive DOM sinks such as href, src, action, xlink:href, and data to protect against Cross-Site Scripting XSS. Prior to the fix, the Angular compiler determined the SecurityContext for directive host bindings host: 'attr.href':...