NPM: n8n: Regular Expression Denial of Service in the Default Blocked-File-Pattern Match via a Git Node Clone Path

NPM: n8n: Regular Expression Denial of Service in the Default Blocked-File-Pattern Match via a Git Node Clone Path vulnerability discovered by ? in WordPress Npm n8n versions 1.123.76...

n8n: Regular Expression Denial of Service in the Default Blocked-File-Pattern Match via a Git Node Clone Path

Impact The Git node's clone operation matched the destination path against the default N8NBLOCKFILEPATTERNS expression, which was written so that a crafted path caused catastrophic backtracking. Evaluation runs synchronously in the main n8n process, so an authenticated user could freeze the...

CVE-2026-86081 n8n: Regular Expression Denial of Service in the Default Blocked-File-Pattern Match via a Git Node Clone Path

n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, the Git node clone operation matched an attacker-controlled destination path against the default N8NBLOCKFILEPATTERNS regular expression. The pattern ^./.git/.$ allowed catastrophic backtracking and ran...

CVE-2025-59463

An attacker may cause chunk-size mismatches that block file transfers and prevent subsequent transfers...

EUVD-2025-7028

Malicious code in bioql PyPI...

HAX 代码问题漏洞

HAX is a HAX+CMS open source microsite managed using a PHP backend by HAX The Web. A code issue vulnerability exists in HAX that stems from using a non-exhaustive blacklist to block only some file types, causing the system to fail open instead of closed...

CVE-2024-12217

CVE-2024-12217 affects the gradio-app/gradio project (commit git 67e4044). The flaw in the blocked_path implementation on Windows allows path traversal via NTFS Alternate Data Streams syntax (e.g., C:/tmp/secret.txt::$DATA), bypassing blocks that prevent access to restricted files and enabling re...

Description of the security update for SharePoint Enterprise Server 2016: February 14, 2023 (KB5002350)

None None...

Description of the security update for SharePoint Server Subscription Edition: December 13, 2022 (KB5002327)

None None...

CVE-2019-9608

An issue was discovered in OFCMS before 1.1.3. Remote attackers can execute arbitrary code because blocking of .jsp and .jspx files does not consider for example file.jsp::$DATA to the admin/ueditor/uploadImage URI...

The vulnerability of the X Window System graphical server allows a perpetrator to alter file access rights or cause a service failure.

The vulnerability of the LockServer function os/utils.c in the X Window System graphical server arises due to synchronization errors when using a shared resource. Exploiting this vulnerability allows an attacker acting locally to change file access rights to “444” or to cause a service failure by...