CVE-2026-123852

In JetBrains Junie GitHub Action before 1.8.0 code execution with workflow credentials was possible via fork updates...

CVE-2026-123852

In JetBrains Junie GitHub Action before 1.8.0 code execution with workflow credentials was possible via fork updates...

CVE-2026-123852

JetBrains Junie GitHub Action versions prior to 1.8.0 are vulnerable to code execution using workflow credentials. This vulnerability is triggered via fork updates , where an attacker can execute arbitrary code. The issue is categorized under CWE-863 (Incorrect Authorization). While the risk is h...

EUVD-2026-118355

In JetBrains Junie GitHub Action before 1.8.0 code execution with workflow credentials was possible via fork updates...

CVE-2026-123852: JetBrains Junie GitHub Action: In JetBrains Junie GitHub Action before 1.8.0 code execution with workflow credentials was possible via fork updates

In JetBrains Junie GitHub Action before 1.8.0 code execution with workflow credentials was possible via fork updates...

PT-2026-129143

n8n before 1.123.85, 2.x before 2.43.5, and 2.44.x before 2.44.1 contains a filter injection vulnerability in the Quick Base node, which sends the Where filter to the Quick Base API as raw query text. Attackers supplying untrusted input such as webhook data used to build the filter can make Get...

NPM: n8n: Prototype Pollution via Workflow Credentials Leads to Unauthenticated User and Project Enumeration

NPM: n8n: Prototype Pollution via Workflow Credentials Leads to Unauthenticated User and Project Enumeration vulnerability discovered by ? in WordPress Npm n8n versions 1.123.61...

n8n: Prototype Pollution via Workflow Credentials Leads to Unauthenticated User and Project Enumeration

Impact An authenticated user with the default workflow:create permission could pollute Object.prototype through a crafted workflow saved, updated, or imported via the workflow API. This can be leveraged to bypass authentication, allowing unauthenticated requests to be treated as a privileged user...

GHSA-75QM-GP28-RCQ9 n8n: Prototype Pollution via Workflow Credentials Leads to Unauthenticated User and Project Enumeration

Impact An authenticated user with the default workflow:create permission could pollute Object.prototype through a crafted workflow saved, updated, or imported via the workflow API. This can be leveraged to bypass authentication, allowing unauthenticated requests to be treated as a privileged user...

CVE-2026-59206 n8n: Prototype Pollution via Workflow Credentials Leads to Unauthenticated User and Project Enumeration

n8n is an open source workflow automation platform. Prior to 1.123.61, 2.27.4, and, 2.28.1, an authenticated user with the default workflow:create permission could pollute Object.prototype through a crafted workflow saved, updated, or imported via the workflow API, allowing unauthenticated reques...

CVE-2026-59206 n8n: Prototype Pollution via Workflow Credentials Leads to Unauthenticated User and Project Enumeration

n8n is an open source workflow automation platform. Prior to 1.123.61, 2.27.4, and, 2.28.1, an authenticated user with the default workflow:create permission could pollute Object.prototype through a crafted workflow saved, updated, or imported via the workflow API, allowing unauthenticated reques...

CVE-2026-59206

n8n is affected by a prototype pollution vulnerability in which an authenticated user with the default workflow:create permission could pollute Object.prototype via a crafted workflow saved, updated, or imported through the workflow API. This corruption could cause unauthenticated requests to be ...

PT-2026-50172

Name of the Vulnerable Software and Affected Versions n8n versions prior to 2.25.7 n8n versions prior to 2.26.2 Description A prototype pollution issue allows a crafted public webhook payload to inject attacker-controlled fields into workflow data during internal object copying. Prototype polluti...

📄 NocoBase 2.0.27 VM Sandbox Escape

NocoBase versions 2.0.27 and below VM sandbox escape exploit. Exploit Title: NocoBase 2.0.27 - VM Sandbox Escape Date: 2026-03-26 Exploit Author: Onurcan Genç Vendor Homepage: https://www.nocobase.com/ Software Link: https://github.com/nocobase/nocobase Version: = 2.0.27 — patched in 2.0.28 Teste...