117472 matches found
EUVD-2026-38474
n8n is an open source workflow automation platform. Prior to 2.25.7 and 2.26.2, a prototype pollution vulnerability allowed a crafted public webhook payload to inject attacker-controlled fields into workflow data during internal object copying. These fields could be surfaced and consumed as norma...
CVE-2026-54314
n8n is an open source workflow automation platform. Prior to 2.24.0, the Compression node's Decompress operation expanded attacker-controlled archives into memory without enforcing limits on decompressed output size. An unauthenticated attacker could send a small compressed archive to a public...
EUVD-2026-38459
n8n is an open source workflow automation platform. Prior to 2.24.0, an authenticated user with workflow edit access could supply a malicious filter value in the MongoDB node's Find And Replace operation. The value was not validated before being passed to MongoDB as a query filter, allowing...
CVE-2025-71376
creationtimestamp| type| source ---|---|--- 2026-06-23 14:52:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moxnnmxy7m2q...
CVE-2023-54365
creationtimestamp| type| source ---|---|--- 2026-06-23 14:37:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moxmsqt73o2b 2026-07-13 16:02:51+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqk2wiuhrz2z 2026-07-16 08:02:13+00:00| seen|...
CVE-2026-56248
creationtimestamp| type| source ---|---|--- 2026-06-23 14:32:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moxmjserwm2r...
CVE-2026-56225
creationtimestamp| type| source ---|---|--- 2026-06-23 14:19:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moxlsg2pk52s...
CVE-2026-56258
creationtimestamp| type| source ---|---|--- 2026-06-23 14:15:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moxlmgqhll2w 2026-06-29 01:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mpfcdup5pk2t...
CVE-2026-56315
creationtimestamp| type| source ---|---|--- 2026-06-23 14:12:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moxlh2kytx2w...
CVE-2026-54892
creationtimestamp| type| source ---|---|--- 2026-06-23 14:07:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moxl5ook3g2a...
CVE-2024-34854
creationtimestamp| type| source ---|---|--- 2026-06-23 14:06:10+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/4f2d94b3-9a83-4ad8-9f83-1cff5279a4d6 2026-06-30 11:39:34+00:00| exploited|...
CVE-2026-56222
creationtimestamp| type| source ---|---|--- 2026-06-23 14:02:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moxkvowk242n...
CVE-2025-71341
creationtimestamp| type| source ---|---|--- 2026-06-23 13:59:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moxkqcdnog2l...
CVE-2026-10711
creationtimestamp| type| source ---|---|--- 2026-06-23 13:54:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moxkhdtk2l2t...
CVE-2025-71365
creationtimestamp| type| source ---|---|--- 2026-06-23 13:49:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moxk6f6zbv2o...
Vulnerability Reports Are Not Special Anymore
A requirement for staying sane while working in public as an open source maintainer is realizing that every issue, PR, and piece of feedback is a present, not an obligation. You can accept it, ignore it, and use it partially or not at all. Except… For years, as lead of the Go Security team at the...
CVE-2026-2264
creationtimestamp| type| source ---|---|--- 2026-06-23 12:06:38+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3moxefoiklk2n...
Astra Linux – Vulnerability found in Linux 6.12, Linux 6.1
In the Linux kernel, the following vulnerabilities have been resolved: ipv6: rpl: Reserve enough headroom for the MAC header when recompressing the SRH. The function ipv6rplsrhrcv decompresses the RFC 6554 Source Routing Header, swaps the next segment into ipv6hdr-daddr, recompresses it, and then...
Astra Linux – Vulnerability found in Linux 6.12, Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: macvlan: The error recovery mechanism in macvlancommonnewlink was fixed. Valis provided a detailed reproduction of the issue that caused the kernel to crash: bash ip link add p1 type veth peer p2 ip link set address...