CVE-2026-65599

n8n is affected by a credential exposure in versions before 1.123.64, 2.29.8, and 2.30.1. When configured with a Google Service Account key, the full PEM private key was incorrectly placed in the JWT header’s kid field (intended as a key identifier). JWT headers are Base64-encoded, not encrypted,...

CVE-2026-65599

n8n versions before 1.123.64, 2.29.8, and 2.30.1 contain a credential exposure vulnerability: when configured with a Google Service Account key, the full PEM private key was mistakenly placed in the JWT header's kid field intended only for a key identifier. Because JWT headers are Base64-encoded...

CVE-2026-65599 n8n before 1.123.64, 2.29.8, and 2.30.1 Credential Exposure via JWT Header

n8n versions before 1.123.64, 2.29.8, and 2.30.1 contain a credential exposure vulnerability: when configured with a Google Service Account key, the full PEM private key was mistakenly placed in the JWT header's kid field intended only for a key identifier. Because JWT headers are Base64-encoded...

EUVD-2026-47643

n8n versions before 1.123.64, 2.29.8, and 2.30.1 contain a credential exposure vulnerability: when configured with a Google Service Account key, the full PEM private key was mistakenly placed in the JWT header's kid field intended only for a key identifier. Because JWT headers are Base64-encoded...

CVE-2026-65599 n8n before 1.123.64, 2.29.8, and 2.30.1 Credential Exposure via JWT Header

n8n versions before 1.123.64, 2.29.8, and 2.30.1 contain a credential exposure vulnerability: when configured with a Google Service Account key, the full PEM private key was mistakenly placed in the JWT header's kid field intended only for a key identifier. Because JWT headers are Base64-encoded...

CVE-2026-65599 n8n before 1.123.64, 2.29.8, and 2.30.1 Credential Exposure via JWT Header

n8n versions before 1.123.64, 2.29.8, and 2.30.1 contain a credential exposure vulnerability: when configured with a Google Service Account key, the full PEM private key was mistakenly placed in the JWT header's kid field intended only for a key identifier. Because JWT headers are Base64-encoded...

OPENSUSE-SU-2026:21413-1 Security update for google-cloud-sap-agent

This update for google-cloud-sap-agent fixes the following issue: - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation bsc1266604. Changes for google-cloud-sap-agent: - Update golang.org/x/net to v0.57....

SUSE-SU-2026:22848-1 Security update for google-cloud-sap-agent

This update for google-cloud-sap-agent fixes the following issue: - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation bsc1266604. Changes for google-cloud-sap-agent: - Update golang.org/x/net to v0.57....

CVE-2026-16424

creationtimestamp| type| source ---|---|--- 2026-07-22 04:45:29+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260722 2026-07-22 14:16:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mraj5tlbai2v 2026-07-22 14:55:25+00:00| seen|...

CVE-2026-16422

creationtimestamp| type| source ---|---|--- 2026-07-22 04:45:24+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260722 2026-07-22 14:55:25+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mrale6kak22g 2026-07-24 04:45:27+00:00| seen|...

CVE-2026-16421

creationtimestamp| type| source ---|---|--- 2026-07-22 04:45:22+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260722 2026-07-22 14:55:25+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mrale6kak22g 2026-07-22 22:49:01+00:00| seen|...

CVE-2026-16420

creationtimestamp| type| source ---|---|--- 2026-07-22 04:45:20+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260722 2026-07-22 14:55:25+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mrale6kak22g 2026-07-22 22:49:01+00:00| seen|...

CVE-2026-16418

creationtimestamp| type| source ---|---|--- 2026-07-22 04:45:15+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260722 2026-07-22 14:55:25+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mrale6kak22g 2026-07-24 04:45:17+00:00| seen|...

CVE-2026-16417

creationtimestamp| type| source ---|---|--- 2026-07-22 04:45:13+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260722 2026-07-22 14:55:24+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mrale6kak22g 2026-07-24 04:45:15+00:00| seen|...

CVE-2026-16416

creationtimestamp| type| source ---|---|--- 2026-07-22 04:45:10+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260722 2026-07-22 14:55:24+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mrale6kak22g 2026-07-24 04:45:11+00:00| seen|...

CVE-2026-16415

creationtimestamp| type| source ---|---|--- 2026-07-22 04:45:08+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260722 2026-07-22 14:55:24+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mrale6kak22g 2026-07-24 04:45:09+00:00| seen|...

CVE-2026-16414

creationtimestamp| type| source ---|---|--- 2026-07-22 04:45:06+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260722 2026-07-22 14:55:24+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mrale6kak22g 2026-07-24 04:45:06+00:00| seen|...

EUVD-2026-47567

Inappropriate implementation in WebAudio in Google Chrome prior to 150.0.7871.182 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

EUVD-2026-47575

Insufficient validation of untrusted input in Certificate in Google Chrome on Linux prior to 150.0.7871.182 allowed an attacker in a privileged network position to perform domain spoofing via malicious network traffic. Chromium security severity: High...

EUVD-2026-47576

Use after free in UI in Google Chrome prior to 150.0.7871.182 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...