117469 matches found
CVE-2023-34738
creationtimestamp| type| source ---|---|--- 2026-06-23 16:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3moxtjddrt62r...
CVE-2026-56815
creationtimestamp| type| source ---|---|--- 2026-06-23 16:31:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moxt6vyz4g2t 2026-06-23 21:31:57+00:00| seen| https://bsky.app/profile/payloadforge.io/post/3moydyj6t6s2m 2026-06-24 11:39:31+00:00| seen|...
CVE-2026-50221
creationtimestamp| type| source ---|---|--- 2026-06-23 16:29:59+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3moxt4m72zm2s 2026-06-29 23:53:29+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphop63u4q2q...
CVE-2026-35018
creationtimestamp| type| source ---|---|--- 2026-06-23 16:21:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moxsmyk3dz2q...
CVE-2026-55556
creationtimestamp| type| source ---|---|--- 2026-06-23 16:19:59+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3moxskp6qvv27...
CVE-2026-27604
creationtimestamp| type| source ---|---|--- 2026-06-23 16:16:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moxsdzkx7u2a...
Security Bulletin: DNS Rebinding TOCTOU Bypass of SSRF Protection in Langflow OSS URL Component
Summary Langflow OSS contains DNS rebinding TOCTOU vulnerability bypassing SSRF protection. URL component validates URLs with validateurlforssrf but fetches via RecursiveUrlLoader performing independent DNS resolution, creating exploitable TOCTOU window. Maintainers fixed identical issue in...
CVE-2026-10609
creationtimestamp| type| source ---|---|--- 2026-06-23 16:01:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moxrkfzp7i2a...
CVE-2026-4610
creationtimestamp| type| source ---|---|--- 2026-06-23 15:58:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moxrdorszy2l...
CVE-2026-44792 n8n: Source Control Pull SQL Injection
n8n is an open source workflow automation platform. Prior to 1.123.43, 2.22.1, and 2.20.7, an attacker with write access to the git repository connected to an n8n Source Control configuration could commit a malicious Data Table JSON file containing a crafted column name. When an administrator...
CVE-2026-44792 n8n: Source Control Pull SQL Injection
n8n is an open source workflow automation platform. Prior to 1.123.43, 2.22.1, and 2.20.7, an attacker with write access to the git repository connected to an n8n Source Control configuration could commit a malicious Data Table JSON file containing a crafted column name. When an administrator...
CVE-2026-44792 n8n: Source Control Pull SQL Injection
n8n is an open source workflow automation platform. Prior to 1.123.43, 2.22.1, and 2.20.7, an attacker with write access to the git repository connected to an n8n Source Control configuration could commit a malicious Data Table JSON file containing a crafted column name. When an administrator...
EUVD-2026-38486
n8n is an open source workflow automation platform. Prior to 1.123.43, 2.22.1, and 2.20.7, an attacker with write access to the git repository connected to an n8n Source Control configuration could commit a malicious Data Table JSON file containing a crafted column name. When an administrator...
CVE-2026-44792
CVE-2026-44792 describes a SQL injection risk in n8n caused by importing a crafted Data Table JSON file during a Source Control Pull. Attack requires: PostgreSQL backend, Source Control feature enabled and connected to a writable repository, and an administrator triggering a Pull. The vulnerabili...
CVE-2026-12969
creationtimestamp| type| source ---|---|--- 2026-06-23 15:54:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moxr5pmmtj2l...
EUVD-2026-38476
n8n is an open source workflow automation platform. Prior to 1.123.55, 2.25.7, and 2.26.2, three EE endpoints used by the Dynamic Credentials feature accepted any authenticated n8n session without performing per-resource ownership or scope checks on the target workflow or credential. An...
EUVD-2026-38474
n8n is an open source workflow automation platform. Prior to 2.25.7 and 2.26.2, a prototype pollution vulnerability allowed a crafted public webhook payload to inject attacker-controlled fields into workflow data during internal object copying. These fields could be surfaced and consumed as norma...
CVE-2026-54314
n8n is an open source workflow automation platform. Prior to 2.24.0, the Compression node's Decompress operation expanded attacker-controlled archives into memory without enforcing limits on decompressed output size. An unauthenticated attacker could send a small compressed archive to a public...
EUVD-2026-38459
n8n is an open source workflow automation platform. Prior to 2.24.0, an authenticated user with workflow edit access could supply a malicious filter value in the MongoDB node's Find And Replace operation. The value was not validated before being passed to MongoDB as a query filter, allowing...