266077 matches found
PT-2026-103780
n8n versions before 1.123.80 contain a credential tampering vulnerability where duplicate node IDs bypass the workflow credential tamper guard. Attackers with editor access to shared workflows can exploit mismatched node ID and name matching to retain victim credentials and redirect secrets to...
Linux Distros Unpatched Vulnerability : CVE-2026-92873
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Pgpool-II contains an incorrect implementation of an authentication algorithm, which may allow an unauthenticated attacker to promote an arbitrary watchdog node...
PT-2026-105135
cleanup xml node in the SOAP XML parser recurses once per XML nesting level with no depth limit. An unauthenticated attacker can post a SOAP request containing tens of thousands of nested elements to any SoapServer endpoint, exhaust the stack and crash the process. The same unbounded recursion...
PT-2026-105145
cleanup xml node in the SOAP XML parser recurses once per XML nesting level with no depth limit. An unauthenticated attacker can post a SOAP request containing tens of thousands of nested elements to any SoapServer endpoint, exhaust the stack and crash the process. The same unbounded recursion...
@chocolatey-software/astro (2.10.0), @hyperscale-it/agent-workflow (0.1.0) +1 more potentially affected by CVE-2026-102984 via @astrojs/node (>=11.0.2, <=11.0.3)
@astrojs/node NPM version =11.0.2, =0.1.0, =0.2.2 Source cves: CVE-2026-102984 Source advisory: OSV:GHSA-QH8J-HQJV-7M4X...
@chocolatey-software/astro (2.10.0), @hyperscale-it/agent-workflow (0.1.0) +1 more potentially affected by CVE-2026-102984 via @astrojs/node (>=11.0.2, <=11.0.3)
@astrojs/node NPM version =11.0.2, =0.1.0, =0.2.2 Source cves: CVE-2026-102984 Source advisory: GHSA-QH8J-HQJV-7M4X...
GHSA-QH8J-HQJV-7M4X Astro: Malformed port in the Host header can crash the Node adapter
Summary In the Astro Node adapter, a request whose Host header contains a malformed port for example example.com:65536 or example.com:8080:8080 produced an invalid request URL. The fallback intended to recover from an unparseable URL reused the same malformed host, so it failed again and raised a...
Astro: Malformed port in the Host header can crash the Node adapter
Summary In the Astro Node adapter, a request whose Host header contains a malformed port for example example.com:65536 or example.com:8080:8080 produced an invalid request URL. The fallback intended to recover from an unparseable URL reused the same malformed host, so it failed again and raised a...
org.jasig.portal.fbms:fbms-webapp (>=0.9.0, <=0.9.2), org.webjars.npm:adal-node (0.1.28) +88 more potentially affected by CVE-2026-103387 via org.webjars.npm:uri-js (>=3.0.2, <=4.4.1)
org.webjars.npm:uri-js MAVEN version =3.0.2, =0.9.0, =6.4.0, =1.5.2, =2.1.0, =0.1.3, =1.4.1 - org.webjars.npm:eureka-js-client 4.3.0 and more Source cves: CVE-2026-103387 Source advisory: SNYK:JAVA-ORGWEBJARSNPM-20341610...
CVE-2026-102136
In multi-node deployments, an attacker who had already obtained code execution on one appliance node could submit a value through an internal cluster interface that was written into monitoring configuration on another node without sufficient validation, potentially allowing OS commands to be...
GHSA-2GQQ-GQF2-X968 vulnerabilities
Vulnerabilities for packages: commercial-gitlab-rails-ee-fips, code-server, homepage, kibana, node-gyp, commercial-gitlab-rails-ee, prism, lerna...
GHSA-2JFJ-6HJV-FM6J vulnerabilities
Vulnerabilities for packages: commercial-gitlab-rails-ee-fips, code-server, homepage, kibana, node-gyp, commercial-gitlab-rails-ee, prism, lerna...
GHSA-3XPG-4RPP-HHHM vulnerabilities
Vulnerabilities for packages: commercial-gitlab-rails-ee-fips, code-server, homepage, kibana, node-gyp, commercial-gitlab-rails-ee, prism, lerna...
GHSA-8436-99HF-9MMV vulnerabilities
Vulnerabilities for packages: commercial-gitlab-rails-ee-fips, code-server, homepage, kibana, node-gyp, commercial-gitlab-rails-ee, prism, lerna...
GHSA-RX4F-C7P8-82VQ vulnerabilities
Vulnerabilities for packages: commercial-gitlab-rails-ee-fips, code-server, homepage, kibana, node-gyp, commercial-gitlab-rails-ee, prism, lerna...
GHSA-W293-VG96-WGC3 vulnerabilities
Vulnerabilities for packages: commercial-gitlab-rails-ee-fips, code-server, homepage, kibana, node-gyp, commercial-gitlab-rails-ee, prism, lerna...
GO-2026-6506 vulnerabilities
Vulnerabilities for packages: kubernetes-dns-node-cache, eks-distro-fips, k8sgateway, kubernetes-dns-node-cache-fips, juicefs, k8sgateway-fips, eks-distro...
GHSA-2JFJ-6HJV-FM6J vulnerabilities
Vulnerabilities for packages: lerna, code-server, prism, node-gyp...