n8n Node.js Package 2.0.x < 2.37.7 / 2.38.x < 2.38.2 Persistent Storage Exhaustion (CVE-2026-86075)

The version of the n8n Node.js Package installed on the remote host is 2.0.x prior to 2.37.7, or is 2.38.x prior to 2.38.2. It is, therefore, affected by a denial of service vulnerability: - n8n is an open source workflow automation platform. Prior to 2.37.7 and 2.38.2, the OAuth Dynamic Client...

CVE-2026-42235: Improper Neutralization of Alternate XSS Syntax

n8n is an open source workflow automation platform. Prior to versions 1.123.32, 2.17.4, and 2.18.1, an unauthenticated attacker could register a malicious MCP OAuth client with a crafted clientname. If a victim user authorized the OAuth consent dialog and a second user subsequently revoked that...

CVE-2023-33758: Improper Neutralization of Input During Web Page Generation

Splicecom Maximiser Soft PBX v1.5 and before was discovered to contain a cross-site scripting XSS vulnerability via the CLIENTNAME and DEVICEGUID fields in the login component...

CVE-2023-33758

Splicecom Maximiser Soft PBX v1.5 and before was discovered to contain a cross-site scripting XSS vulnerability via the CLIENTNAME and DEVICEGUID fields in the login component...

Pyo Buffer Overflow Vulnerability

Buffer overflow in ajaxsoundstudio.com Pyo = 1.03 in the Serverjackinit function which allows attackers to conduct Denial of Service attacks by arbitrary constructing a overlong clientname...