CGA-4P4W-75HJ-46W4

Bulletin has no description...

CGA-3F6X-X2XM-45QQ

Bulletin has no description...

CGA-56GG-W7H3-VJJ5

Bulletin has no description...

CGA-8MQH-MPMJ-P3R9

Bulletin has no description...

CGA-5H47-WRCJ-569R

Bulletin has no description...

CGA-4VX9-RR6C-C4M4

Bulletin has no description...

CGA-3PC8-WW6R-83W8

Bulletin has no description...

GHSA-MVH2-CRG5-V77C

creationtimestamp| type| source ---|---|--- 2026-07-22 16:00:04+00:00| seen| https://t.me/bdufstecru/3334 2026-07-23 00:00:22+00:00| seen| https://t.me/bdufstecru/3334...

DEBIAN-CVE-2026-48029

libheif is a HEIF and AVIF file format decoder and encoder. Versions 1.19.0 through 1.21.2 have a heap OOB read in ImageItemGrid::decodegridtile via irot-induced tile-coordinate underflow. Version 1.22.0 fixes the issue...

GHSA-C35G-MGC3-95RX

creationtimestamp| type| source ---|---|--- 2026-07-22 14:30:53+00:00| seen| https://infosec.exchange/users/mmguero/statuses/116964108001076474...

GHSA-M5FR-RV3H-XG2R

creationtimestamp| type| source ---|---|--- 2026-07-22 14:30:53+00:00| seen| https://infosec.exchange/users/mmguero/statuses/116964108001076474...

GHSA-537C-GMF6-5CCF

creationtimestamp| type| source ---|---|--- 2026-07-22 14:30:53+00:00| seen| https://infosec.exchange/users/mmguero/statuses/116964108001076474...

DEBIAN-CVE-2026-55973

In NLnet Labs Unbound 1.23.0 up to and including 1.25.1, when 'dns-error-reporting: yes' is set, the EDNS Report-Channel option code 18 from the last upstream response is read and uses the option's length as the length of the agent domain. When a domain name check is performed on the agent domain...

DEBIAN-CVE-2026-50251

In NLnet Labs Unbound up to and including version 1.25.1, when 'unwanted-reply-threshold' is enabled set to any value greater than zero, glue records of 0.0.0.0/::0 can short-circuit Unbound, on systems that can direct such traffic, by issuing DNS queries and receiving seemingly unwanted replies...

UBUNTU-CVE-2026-52863

In NLnet Labs Unbound 1.25.0 up to and including 1.25.1, a fix that makes the 'respip' and 'dns64' modules work together, creates a shallow copy of the view name in effect that could lead to memory corruption if the owner of the original view name is jostled out when Unbound is under pressure...

Moderate: Red Hat Security Advisory: openssl security update

An update for openssl is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerabilit...

Incorrect Authorization

Overview n8n-nodes-base is a Base nodes of n8n Affected versions of this package are vulnerable to Incorrect Authorization in the GraphQL node when the "Allowed HTTP Request Domains" restriction is not enforced on HTTP-based credentials. An attacker can access restricted credentials by configurin...

Command Injection

Overview @n8n/computer-use is a Local AI gateway for n8n AI Assistant — filesystem, shell, screenshots, mouse/keyboard, and browser automation Affected versions of this package are vulnerable to Command Injection via the Shell tool activation path in...

GHSA-FMVG-VHQQ-R2MJ Duplicate Advisory: Custom Header Credential Values Leaked in Plaintext into LLM Node Execution Data

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-89gh-3pgc-v5h2. This link is maintained to preserve external references. Original Description n8n versions before 1.123.64 fail to properly mask custom HTTP header credentials in LLM sub-node execution data,...

GHSA-PMV8-RQ9R-6J72

creationtimestamp| type| source ---|---|--- 2026-07-22 12:01:03+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mrabmge3db2g 2026-08-04 07:00:04+00:00| published-proof-of-concept| https://t.me/bdufstecru/3359 2026-08-05 00:00:52+00:00| published-proof-of-concept|...