Important: Red Hat Security Advisory: Ansible plug-ins for Red Hat Developer Hub Product Release Update

Updated images are now available for Red Hat Ansible Automation Platform 2.2, which include new features, bug fixes, and enhancements for Red Hat Ansible Automation Platform integration with Red Hat Developer Hub. Red Hat Ansible Automation Platform 2.2 delivers an Ansible-first Red Hat Developer...

Important: Red Hat Security Advisory: Ansible plug-ins for Red Hat Developer Hub Product Release Update

Updated images are now available for Red Hat Ansible Automation Platform 2.1, which include new features, bug fixes, and enhancements for Red Hat Ansible Automation Platform integration with Red Hat Developer Hub. Red Hat Ansible Automation Platform 2.1 delivers an Ansible-first Red Hat Developer...

CVE-2026-71539

n8n is an open source workflow automation platform. Prior to 1.123.64, 2.29.8, and 2.30.1, the Git node clone operation allows an authenticated workflow user to swap a validated directory for a symlink before cloning, planting a crafted repository in the community node directory that loads as a...

CVE-2026-71539

n8n is an open source workflow automation platform. Prior to 1.123.64, 2.29.8, and 2.30.1, the Git node clone operation allows an authenticated workflow user to swap a validated directory for a symlink before cloning, planting a crafted repository in the community node directory that loads as a...

PT-2026-77137

Name of the Vulnerable Software and Affected Versions n8n versions prior to 1.123.64 n8n versions prior to 2.29.8 n8n versions prior to 2.30.1 Description The Git node clone operation allows an authenticated workflow user to replace a validated directory with a symlink before the cloning process...

CVE-2026-35219

Budibase is an open-source low-code platform. Prior to 3.41.3, automation steps in packages/server/src/automations/steps/outgoingWebhook.ts, packages/server/src/automations/steps/zapier.ts, packages/server/src/automations/steps/n8n.ts, packages/server/src/automations/steps/slack.ts, and...

CVE-2026-35219 Budibase: SSRF in Automation Steps - Webhook, Zapier, N8N, Slack, Discord Bypass IP Blacklist

Budibase is an open-source low-code platform. Prior to 3.41.3, automation steps in packages/server/src/automations/steps/outgoingWebhook.ts, packages/server/src/automations/steps/zapier.ts, packages/server/src/automations/steps/n8n.ts, packages/server/src/automations/steps/slack.ts, and...

CVE-2026-35219 Budibase: SSRF in Automation Steps - Webhook, Zapier, N8N, Slack, Discord Bypass IP Blacklist

Budibase is an open-source low-code platform. Prior to 3.41.3, automation steps in packages/server/src/automations/steps/outgoingWebhook.ts, packages/server/src/automations/steps/zapier.ts, packages/server/src/automations/steps/n8n.ts, packages/server/src/automations/steps/slack.ts, and...

Important: Red Hat Security Advisory: Red Hat Ansible Automation Platform Execution Environments Update

An update is now available for Red Hat Ansible Automation Platform Execution Environments Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing IT automation at scale. IT Managers can provide top-down guidelines on how automation is applied to...

Important: Red Hat Security Advisory: Red Hat Ansible Automation Platform Execution Environments Update

An update is now available for Red Hat Ansible Automation Platform Execution Environments Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing IT automation at scale. IT Managers can provide top-down guidelines on how automation is applied to...

Exploit for Deserialization of Untrusted Data in Snakeyaml_Project Snakeyaml

CVE-2022-1471 — SnakeYAML RCE lab Jira / Automation for Jira...

GHSA-5FPJ-28RV-84R7 Budibase: SSRF in Automation Steps - Webhook, Zapier, N8N, Slack, Discord Bypass IP Blacklist

Summary Budibase automation steps outgoing webhook, Zapier, n8n, Slack, Discord, Make.com make server-side HTTP requests to user-provided URLs using node-fetch directly, completely bypassing the IP blacklist protection that exists in the REST API integration. Additionally, the REST API blacklist...

GO-2026-4600 vulnerabilities

Vulnerabilities for packages: loki-fips, aws-ebs-csi-driver-fips, victoriametrics, victoriametrics-cluster-fips, cluster-autoscaler-fips, grafana-rollout-operator, victorialogs, amazon-k8s-cni-fips, polaris, victoriametrics-fips, nova, flux-operator-fips, flux-source-controller, nova-fips,...

GO-2025-3368 vulnerabilities

Vulnerabilities for packages: argo-workflows, zot, kots, argo-events, argocd-image-updater, crossplane, bom, trivy, pulumi-language-yaml, pulumi, tfsec, flux-kustomize-controller, src-fingerprint, pulumi-language-java, zarf, kubescape, kubevela, gptscript, snyk-cli, grype, kaniko,...

GO-2025-3367 vulnerabilities

Vulnerabilities for packages: argo-workflows, zot, kots, argo-events, argocd-image-updater, crossplane, bom, trivy, pulumi-language-yaml, pulumi, tfsec, flux-kustomize-controller, src-fingerprint, pulumi-language-java, zarf, kubescape, kubevela, gptscript, snyk-cli, grype, kaniko,...

GO-2026-4910 vulnerabilities

Vulnerabilities for packages: steampipe, argo-workflows, zot, kots, argo-events, argocd-image-updater, crossplane, bom, trivy, trufflehog, pulumi-language-yaml, pulumi, tfsec, src-fingerprint, pulumi-language-java, zarf, kubescape, kubevela, xeol, gptscript, snyk-cli, grype, kaniko, rancher-fleet...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: zot, crossplane-provider-aws-cloudfront, argocd-image-updater, crossplane-provider-aws-memorydb, crossplane-provider-aws-route53, pulumi-language-yaml, tflint, fulcio, crossplane-provider-aws-firehose, crossplane-provider-aws-kinesis, pulumi-language-java, glab, zarf...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: ferretdb, tofu-controller, crossplane-provider-aws-cloudfront, s5cmd, terraform-provider-time, fuse-overlayfs-snapshotter, cass-operator, cortex, custom-pod-autoscaler, gitleaks, kubernetes-csi-external-provisioner, rancher-system-upgrade-controller,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: timestamp-authority, bank-vaults, zot, argo-events, flux-helm-controller, crossplane-provider-azure-storage, terragrunt, crossplane-provider-azure, flux-notification-controller, buildkitd, k3d, pulumi, flux-kustomize-controller, fulcio, rook, sops, src-fingerprint,...

Security Bulletin: Security vulnerabilities have been identified in IBM WebSphere Application Server shipped with IBM Buinsess Automation Workflow (CVE-2026-57819, CVE-2026-54225, CVE-2026-64958)

Summary WebSphere Application Server is shipped as a component of IBM Business Automation Workflow. Information about security vulnerabilities affecting IBM WebSphere Application Server Traditional have been published in a security bulletin. Vulnerability Details Refer to the security bulletins...