CVE-2026-77775 Headroom Proxy Sends Upstream Requests to a Client-Supplied Base URL Without Address Validation

Headroom's LLM proxy lets a client choose the upstream destination with the x-headroom-base-url request header. resolveopenaiupstreambase in headroom/proxy/handlers/openai.py accepts the header value, requires only that it parse with an http or https scheme and a hostname, and returns it for use ...

PT-2026-79364

Headroom's LLM proxy lets a client choose the upstream destination with the x-headroom-base-url request header. resolve openai upstream base in headroom/proxy/handlers/openai.py accepts the header value, requires only that it parse with an http or https scheme and a hostname, and returns it for u...

CVE-2026-77775: Server-Side Request Forgery (SSRF)

Headroom's LLM proxy lets a client choose the upstream destination with the x-headroom-base-url request header. resolveopenaiupstreambase in headroom/proxy/handlers/openai.py accepts the header value, requires only that it parse with an http or https scheme and a hostname, and returns it for use ...

@n8n/n8n-nodes-langchain (>=2.32.0, <=2.34.0) potentially affected by CVE-2026-77069 via n8n-nodes-base (>=2.32.0, <=2.34.0)

n8n-nodes-base NPM version =2.32.0, =2.32.0, =2.34.0 Source cves: CVE-2026-77069 Source advisory: SNYK:JS-N8NNODESBASE-20054036...

Server-side Request Forgery (SSRF)

Overview n8n-nodes-base is a Base nodes of n8n Affected versions of this package are vulnerable to Server-side Request Forgery SSRF in the OAuth2 authorization-code-to-access-token exchange, which issues its request through a separate HTTP client that lacks the SSRF guard applied to the discovery...

@n8n/n8n-nodes-langchain (>=2.32.0, <=2.33.1) potentially affected by CVE-2026-77076 via n8n-nodes-base (>=2.32.0, <=2.33.0)

n8n-nodes-base NPM version =2.32.0, =2.32.0, =2.33.1 Source cves: CVE-2026-77076 Source advisory: SNYK:JS-N8NNODESBASE-20186635...

@n8n/n8n-nodes-langchain (2.34.0) potentially affected by CVE-2026-77076 via n8n-nodes-base (2.34.0)

n8n-nodes-base NPM version 2.34.0 is affected by a known vulnerability. The following packages have a transitive dependency on n8n-nodes-base and may be impacted: - @n8n/n8n-nodes-langchain 2.34.0 Source cves: CVE-2026-77076 Source advisory: SNYK:JS-N8NNODESBASE-20186635...

Insertion of Sensitive Information into Log File

Overview n8n-nodes-base is a Base nodes of n8n Affected versions of this package are vulnerable to Insertion of Sensitive Information into Log File in the GraphQL node's error handling, which re-throws the underlying HTTP client error unchanged on a connection level failure rather than wrapping i...

CVE-2026-73402

Subscriber Cross Site Scripting XSS in WP BASE Booking = 6.3.2 versions...

CVE-2026-73402 WordPress WP BASE Booking plugin <= 6.3.2 - Cross Site Scripting (XSS) vulnerability

Subscriber Cross Site Scripting XSS in WP BASE Booking = 6.3.2 versions...

EUVD-2026-63310

Subscriber Cross Site Scripting XSS in WP BASE Booking = 6.3.2 versions...

CVE-2026-73402

WP BASE Booking (a WordPress plugin for managing appointments, services, and events) versions ≤ 6.3.2 are affected by a Subscriber Cross-Site Scripting (XSS) vulnerability. The flaw requires low privileges and user interaction , with a changed scope indicating cross-origin impact. CVSS 3.1 base s...

WordPress WP BASE Booking plugin <= 6.3.2 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by moonge in WordPress Plugin WP BASE Booking versions = 6.3.2...

Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

Overview Affected versions of this package are vulnerable to Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' through the composition lookup. An attacker can manipulate the base function by injecting malicious components during the lookup process,...

PT-2026-78983

Subscriber Cross Site Scripting XSS in WP BASE Booking = 6.3.2 versions...

CVE-2026-73402: Improper Neutralization of Input During Web Page Generation

Subscriber Cross Site Scripting XSS in WP BASE Booking = 6.3.2 versions...

CVE-2026-12522

Zephyr RTOS's on_cmd_atcmdinfo_ipaddr() in drivers/modem/vendor_standalone/hl7800.c uses attacker-controlled delimiter positions as strncpy() length into fixed 64/16-byte buffers, causing stack overflow in supervisor context. A rogue base station can trigger crashes or control-flow hijacking. Fix...

CVE-2026-12522 Stack buffer overflow in Zephyr hl7800 modem driver parsing network-supplied +CGCONTRDP address fields

The HL7800 cellular modem driver's +CGCONTRDP: response handler oncmdatcmdinfoipaddr in drivers/modem/vendorstandalone/hl7800.c parses the PDP-context dynamic parameters local address, subnet mask, gateway, and DNS servers that the cellular network assigns to the device. The response is linearize...

EUVD-2026-63075

The HL7800 cellular modem driver's +CGCONTRDP: response handler oncmdatcmdinfoipaddr in drivers/modem/vendorstandalone/hl7800.c parses the PDP-context dynamic parameters local address, subnet mask, gateway, and DNS servers that the cellular network assigns to the device. The response is linearize...

CVE-2026-12522 Stack buffer overflow in Zephyr hl7800 modem driver parsing network-supplied +CGCONTRDP address fields

The HL7800 cellular modem driver's +CGCONTRDP: response handler oncmdatcmdinfoipaddr in drivers/modem/vendorstandalone/hl7800.c parses the PDP-context dynamic parameters local address, subnet mask, gateway, and DNS servers that the cellular network assigns to the device. The response is linearize...