CVE-2026-42226

n8n is an open source workflow automation platform. Prior to versions 1.123.33 and 2.17.5, the dynamic-node-parameters endpoints did not verify whether the authenticated caller was authorized to use a supplied credential reference. An authenticated user with access to a shared workflow could supp...

CVE-2026-43394

A flaw was found in the Linux kernel's nfsd component. The nfsdnllistenersetdoit function fails to properly release credential references, resulting in a resource leak. This issue could allow a local attacker to exhaust system resources, potentially leading to a Denial of Service DoS...

Authorization Bypass Through User-Controlled Key

Overview flowise is a Flowiseai Server Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key through the generateTextToSpeech handler in text-to-speech/index.ts. An attacker can retrieve text-to-speech settings from a chatflow in another workspace by...