CVE-2026-65015

creationtimestamp| type| source ---|---|--- 2026-07-27 19:20:30+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mrnmis3k5v2n...

CVE-2026-65015 n8n before 2.30.1 Privilege Escalation via run_node_tool

n8n versions before 2.30.1 contain a privilege escalation vulnerability in the AI Agents feature where the node-execution tool lacks proper authorization checks. A Project Viewer user can escalate privileges by chatting with an agent that has node tools enabled, executing arbitrary nodes and...

CVE-2026-65015 n8n before 2.30.1 Privilege Escalation via run_node_tool

n8n versions before 2.30.1 contain a privilege escalation vulnerability in the AI Agents feature where the node-execution tool lacks proper authorization checks. A Project Viewer user can escalate privileges by chatting with an agent that has node tools enabled, executing arbitrary nodes and...

CVE-2025-65015 vulnerabilities

Vulnerabilities for packages: localstack...

Linux Distros Unpatched Vulnerability : CVE-2025-65015

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption JOSE standards. In versions from 1.3.3 to before 1.3.5...

django-ninja-aio-crud (>=1.0.5 <=2.25.0) potentially affected by CVE-2025-65015 via joserfc (=1.4.1)

joserfc PYPI version =1.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on joserfc and may be impacted: - django-ninja-aio-crud =1.0.5, =2.25.0 Source cves: CVE-2025-65015 Source advisory: SNYK:PYTHON-JOSERFC-14052498...

did-sdk-python (>=1.0.0 <=1.1.3), fds-sdk-utils (>=2.1.1 <=2.1.3) +4 more potentially affected by CVE-2025-65015 via joserfc (>=1.0.0 <=1.2.2)

joserfc PYPI version =1.0.0, =1.0.0, =2.1.1, =3.0.2, =0.21.2, =0.6.0, =0.1.0, =0.5.0rc2 Source cves: CVE-2025-65015 Source advisory: SNYK:PYTHON-JOSERFC-14052498...

CVE-2025-65015

joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption JOSE standards. In versions from 1.3.3 to before 1.3.5 and from 1.4.0 to before 1.4.2, the ExceededSizeError exception messages are embedded with non-decoded JWT token parts and may cause...

django-ninja-aio-crud (>=1.0.5 <=2.25.0) potentially affected by CVE-2025-65015 via joserfc (=1.4.1)

joserfc PYPI version =1.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on joserfc and may be impacted: - django-ninja-aio-crud =1.0.5, =2.25.0 Source cves: CVE-2025-65015 Source advisory: OSV:GHSA-FRFH-8V73-GJG4...

CVE-2025-65015

creationtimestamp| type| source ---|---|--- 2025-11-18 10:14:58+00:00| published-proof-of-concept| https://github.com/authlib/joserfc/security/advisories/GHSA-frfh-8v73-gjg4 2025-11-19 00:02:46+00:00| seen| https://infosec.exchange/users/offseq/statuses/115573428387193257 2025-11-19 01:04:23+00:0...