EUVD-2026-47633

n8n versions before 1.123.64 fail to properly mask custom HTTP header credentials in LLM sub-node execution data, writing plaintext API keys and secrets to workflow execution records. Authenticated users with access to execution data can read exposed header values and credentials that persist in...

CVE-2026-65589

n8n versions before 1.123.64 fail to properly mask custom HTTP header credentials in LLM sub-node execution data, writing plaintext API keys and secrets to workflow execution records. Authenticated users with access to execution data can read exposed header values and credentials that persist in...

CVE-2026-65589

n8n versions before 1.123.64 fail to properly mask custom HTTP header credentials in LLM sub-node execution data, writing plaintext API keys and secrets to workflow execution records. Authenticated users with access to execution data can read exposed header values and credentials that persist in...

CVE-2026-65589 n8n before 1.123.64 Credential Exposure via LLM Node Execution Data

n8n versions before 1.123.64 fail to properly mask custom HTTP header credentials in LLM sub-node execution data, writing plaintext API keys and secrets to workflow execution records. Authenticated users with access to execution data can read exposed header values and credentials that persist in...

CVE-2026-65589 n8n before 1.123.64 Credential Exposure via LLM Node Execution Data

n8n versions before 1.123.64 fail to properly mask custom HTTP header credentials in LLM sub-node execution data, writing plaintext API keys and secrets to workflow execution records. Authenticated users with access to execution data can read exposed header values and credentials that persist in...

CVE-2026-65589

CVE-2026-65589 affects n8n versions before 1.123.64. The vulnerability arises because custom HTTP header credentials used by the LLM sub-node execution data are not masked, causing plaintext API keys and secrets to be written to workflow execution records. Authenticated users with access to execu...

CVE-2026-65589 n8n before 1.123.64 Credential Exposure via LLM Node Execution Data

n8n versions before 1.123.64 fail to properly mask custom HTTP header credentials in LLM sub-node execution data, writing plaintext API keys and secrets to workflow execution records. Authenticated users with access to execution data can read exposed header values and credentials that persist in...

CVE-2026-47667

A flaw was found in the CImg Library, a C++ library for image processing. This vulnerability allows a remote attacker to cause a denial of service DoS by providing a specially crafted image file. The library incorrectly handles the header size when processing Analyze/NIfTI files, leading to...

CLSA-2026-1784714664 nginx: Fix of CVE-2026-42055

CVE-2026-42055: fix heap buffer overflow when proxying HTTP/2/gRPC upstream with oversized 2M request header fields...

Exploit for Server-Side Request Forgery in Apache Camel

camel-iggy User-Header Injection Reproducer CVE-2026-55994...

CLSA-2026-1784714329 nginx: Fix of CVE-2026-42055

CVE-2026-42055: fix heap buffer overflow when proxying HTTP/2/gRPC upstream with oversized 2M request header fields...

CLSA-2026-1784714136 nginx: Fix of CVE-2026-42055

CVE-2026-42055: fix heap buffer overflow when proxying HTTP/2/gRPC upstream with oversized 2M request header fields...

Exploit for Server-Side Request Forgery in Apache Camel

camel-atmosphere-websocket Header Injection Reproducer CVE-20...

SUSE-SU-2026:22847-1 Security update for perl

This update for perl fixes the following issues: - CVE-2025-15649: IO:Uncompress:Unzip propagates uncaught exception when parsing zip header with malformed DOS date bsc1266361. - CVE-2026-8376: heap buffer overflow when compiling regular expressions with a repeated fixed string on 32-bit builds...

OPENSUSE-SU-2026:21411-1 Security update for perl

This update for perl fixes the following issues: - CVE-2025-15649: IO:Uncompress:Unzip propagates uncaught exception when parsing zip header with malformed DOS date bsc1266361. - CVE-2026-8376: heap buffer overflow when compiling regular expressions with a repeated fixed string on 32-bit builds...

Trojanized Newtonsoft.Json Fork Hides Game-Rigging Code in a Working Library

Cybersecurity researchers have discovered a NuGet typosquat that's unlike the typical information-stealing malware distributed via package registries: usual info-stealers: it's designed to rig live game results on Digitain. The package, named "Newtonsoftt.Json.Net," masquerades as the...

EUVD-2026-47586

A signed integer overflow vulnerability was found in libarchive's ZIP writer. In the archivewritezipheader function in archivewritesetformatzip.c, when ZIP encryption is enabled and the entry file size is close to INT64MAX, the addition of the encryption overhead to the entry size overflows int64...

EUVD-2026-46450

Verba RAG application version 2.1.3 contains a server-side request forgery vulnerability combined with a same-origin middleware bypass that allows unauthenticated remote attackers to make the server issue arbitrary HTTP requests by supplying a crafted Origin header and attacker-controlled host an...

Mozilla Thunderbird < 140.13

The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 140.13. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-72 advisory. - Memory safety bugs present in Thunderbird ESR 140.12 and Thunderbird 152. Some of these bugs showed...

Mozilla Thunderbird < 153.0

The version of Thunderbird installed on the remote Windows host is prior to 153.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-71 advisory. - Memory safety bugs present in Thunderbird ESR 140.12 and Thunderbird 152. Some of these bugs showed evidence of...