9410 matches found
EUVD-2026-90304
Kiteworks Core did not correctly validate a parameter submitted to the password reset workflow. An unauthenticated attacker who knew the email address of a user with a locally stored password could potentially reset that account's password without access to the emailed reset link and then...
CVE-2026-100275
In JetBrains YouTrack before 2026.2.19197 stored XSS in the workflow error notification toast was possible...
CVE-2026-100276
In JetBrains YouTrack before 2026.2.19197 guest users could remove a workflow action's visibility restriction and run the action...
CVE-2026-100275
In JetBrains YouTrack before 2026.2.19197 stored XSS in the workflow error notification toast was possible...
CVE-2026-100275
JetBrains YouTrack versions prior to 2026.2.19197 are vulnerable to stored XSS within the workflow error notification toast. This flaw allows for unauthorized script execution in the context of the user's session. Remediation is available in version 2026.2.19197 and subsequent releases. No specif...
CVE-2026-100275
In JetBrains YouTrack before 2026.2.19197 stored XSS in the workflow error notification toast was possible...
EUVD-2026-90020
In JetBrains YouTrack before 2026.2.19197 guest users could remove a workflow action's visibility restriction and run the action...
EUVD-2026-90019
In JetBrains YouTrack before 2026.2.19197 stored XSS in the workflow error notification toast was possible...
CVE-2026-100276
In JetBrains YouTrack before 2026.2.19197 guest users could remove a workflow action's visibility restriction and run the action...
CVE-2026-100276
In JetBrains YouTrack versions prior to 2026.2.19197 , an incorrect authorization vulnerability (CWE-863) allowed guest users to bypass visibility restrictions on workflow actions. This flaw enables unauthorized users to execute actions that should be restricted, potentially impacting system inte...
Malicious code in bfox-build-utils (PyPI)
Source: amazon-inspector cae53348f8261653938b39ae3cb79101baff666c4216ecaeb635e34b42ba8293 At install time, setup.py harvests the installer's GitHub credential and uses it to modify the installer's own repository. The script reads $GITHUBWORKSPACE/.git/config, regexes the extraheader =...
Malicious code in bfox-build-utils (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cae53348f8261653938b39ae3cb79101baff666c4216ecaeb635e34b42ba8293 At install time, setup.py harvests the installer's GitHub credential and uses it to modify the installer's own repository. The script reads...
MAL-2026-17319 Malicious code in bfox-build-utils (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cae53348f8261653938b39ae3cb79101baff666c4216ecaeb635e34b42ba8293 At install time, setup.py harvests the installer's GitHub credential and uses it to modify the installer's own repository. The script reads...
CVE-2026-100275: Improper Neutralization of Input During Web Page Generation
In JetBrains YouTrack before 2026.2.19197 stored XSS in the workflow error notification toast was possible...
PT-2026-103322
šØ CVE-2026-100275 In JetBrains YouTrack before 2026.2.19197 stored XSS in the workflow error notification toast was possible š@cveNotify...
@0xlimao/n8n-nodes-ethereum (>=1.0.0, <=1.0.1), @aayshian/n8n-aisensy-ay19 (0.0.1) +124 more potentially affected by unknown CVE via @n8n/workflow-sdk (>=0.2.0, <=0.34.0)
@n8n/workflow-sdk NPM version =0.2.0, =1.0.0, =0.0.1, =1.0.0, =0.0.1, =0.0.1, =0.3.6, =0.1.0, =1.0.0, =0.1.4, =1.1.3, =1.1.6 and more Source cves: unknown CVE Source advisory: MEND:WS-2026-0097...
@n8n/ai-workflow-builder (1.42.0), @n8n/backend-test-utils (1.42.0) +7 more potentially affected by unknown CVE via @n8n/workflow-sdk (0.35.0)
@n8n/workflow-sdk NPM version 0.35.0 is affected by a known vulnerability. The following packages have a transitive dependency on @n8n/workflow-sdk and may be impacted: - @n8n/ai-workflow-builder 1.42.0 - @n8n/backend-test-utils 1.42.0 - @n8n/db 1.42.0 - @n8n/instance-ai 1.27.0 -...
Covert Assistance: Helpful LLM Agents Evade Oversight in Multi-Agent Systems
As multi-agent systems enter high-stakes domains, the possibility that agents may circumvent safety boundaries is a growing concern. Prior work has examined this risk primarily in adversarial settings, where agents are instructed or rewarded to communicate covertly and evade oversight. We show th...
WS-2026-0097
n8n MCP workflow-validation interpreter the @n8n/workflow-sdk AST interpreter allowed workflow code to mutate shared prototypes. Affects n8n 2.12.0 to 2.41.3 and 2.42.0 @n8n/workflow-sdk 0.2.0 to 0.34.0 and 0.35.0; fixed in n8n 2.41.4 / 2.42.1 @n8n/workflow-sdk 0.34.1 / 0.35.1...