Cross-site Scripting (XSS)

Overview @n8n/n8n-nodes-langchain is a Affected versions of this package are vulnerable to Cross-site Scripting XSS via the workflow creation and editing process in various nodes, including Form Trigger, Chat Trigger, Send & Wait, Webhook, and Chat nodes. An attacker can execute arbitrary scripts...

Cross-site Scripting (XSS)

Overview n8n-nodes-base is a Base nodes of n8n Affected versions of this package are vulnerable to Cross-site Scripting XSS via the workflow creation and editing process in various nodes, including Form Trigger, Chat Trigger, Send & Wait, Webhook, and Chat nodes. An attacker can execute arbitrary...

GHSA-X43W-PH7M-PFJX

creationtimestamp| type| source ---|---|--- 2026-02-25 22:10:19+00:00| seen| https://gist.github.com/alon710/293e46507acc8edc06151ab2b07b24f3...

CVE-2026-25734

creationtimestamp| type| source ---|---|--- 2026-02-25 21:10:19+00:00| seen| https://gist.github.com/alon710/6e7c8420a855ad42b024831d7bcfd1a5 2026-02-25 21:31:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfpmx7pnhq2z...

CVE-2025-67445

creationtimestamp| type| source ---|---|--- 2026-02-25 20:56:55+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfpkzarlwg2c...

CVE-2026-25736

creationtimestamp| type| source ---|---|--- 2026-02-25 20:10:18+00:00| seen| https://gist.github.com/alon710/3c404d6776ba547e659e45aab0d6bdf9 2026-02-25 21:41:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfpnjbpjni2z...

CVE-2026-24908

creationtimestamp| type| source ---|---|--- 2026-02-25 19:57:56+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfphpscn2i2d 2026-02-27 16:00:15+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mfu3emk7of2x...

Rucio WebUI Vulnerable to Stored Cross-site Scripting (XSS) through Custom Rule Function

Summary A stored Cross-site Scripting XSS vulnerability was identified in the Custom Rules function of the WebUI where attacker-controlled input is persisted by the backend and later rendered in the WebUI without proper output encoding. This allows arbitrary JavaScript execution in the context of...

GHSA-C6RR-7PMC-73WC

creationtimestamp| type| source ---|---|--- 2026-02-25 18:40:19+00:00| seen| https://gist.github.com/alon710/4c89872b5367b732a7e8b5c781c3c38c...

CVE-2026-3206

creationtimestamp| type| source ---|---|--- 2026-02-25 18:27:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfpcox4c2z2e...

GHSA-2PHG-QGMM-R638

creationtimestamp| type| source ---|---|--- 2026-02-25 18:10:18+00:00| seen| https://gist.github.com/alon710/e543dec211c6fa821b6eb41be3f9ef64...

CVE-2025-69771

creationtimestamp| type| source ---|---|--- 2026-02-25 17:46:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfpafk5l3d2v 2026-02-27 08:11:50+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mftb6z6ijg2s...

GHSA-F229-3862-4942

creationtimestamp| type| source ---|---|--- 2026-02-25 17:40:18+00:00| seen| https://gist.github.com/alon710/08dcac21faab3680bc696fdf3a7877bd...

CVE-2026-27704

creationtimestamp| type| source ---|---|--- 2026-02-25 17:33:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfp7o7bgr62o 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/...

CVE-2026-20107

creationtimestamp| type| source ---|---|--- 2026-02-25 17:22:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfp6zifo6m2x...

CVE-2026-3153

creationtimestamp| type| source ---|---|--- 2026-02-25 17:20:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mfp6vog7ey24...

GHSA-49GM-HH7W-WFVF

creationtimestamp| type| source ---|---|--- 2026-02-25 16:40:18+00:00| seen| https://gist.github.com/alon710/5a98ccf5e002241a9fed9bd171aac6d2 2026-06-29 13:27:42+00:00| seen| https://gist.github.com/zSarix/66a6804b1056cbaf4c2940b8f9808613...

GHSA-8VRH-3PM2-V4V6

creationtimestamp| type| source ---|---|--- 2026-02-25 16:10:19+00:00| seen| https://gist.github.com/alon710/e8bd93f4619202bc0c1f669862922839...

EUVD-2026-8652

In JetBrains TeamCity before 2025.11.3 open redirect was possible in the React project creation flow...

CVE-2026-25136

creationtimestamp| type| source ---|---|--- 2026-02-25 14:16:41+00:00| published-proof-of-concept| https://github.com/rucio/rucio/security/advisories/GHSA-h79m-5jjm-jm4q 2026-02-25 20:26:41+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfpjd6prcp2s 2026-02-25 22:10:59+00:0...