34878 matches found
GHSA-3WXW-XV34-2FRG
creationtimestamp| type| source ---|---|--- 2026-09-08 21:28:14+00:00| seen| https://gist.github.com/alon710/203f3e8540b97026337742aaf8fa0eb2...
CVE-2026-79322
creationtimestamp| type| source ---|---|--- 2026-09-08 21:28:13+00:00| seen| https://gist.github.com/mrtantoine/417ee9b774f022bd747211b9eadc0069 2026-09-09 19:58:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/d7ln6a7y6dk2m 2026-09-10 01:21:24+00:00| seen|...
CVE-2026-79323
creationtimestamp| type| source ---|---|--- 2026-09-08 21:28:11+00:00| seen| https://gist.github.com/mrtantoine/4331a5f04f8309eb1799b257a7371f34 2026-09-09 20:00:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/itlffggmuxgud 2026-09-10 01:21:25+00:00| seen|...
CVE-2026-79324
creationtimestamp| type| source ---|---|--- 2026-09-08 21:28:11+00:00| seen| https://gist.github.com/mrtantoine/4311aa0c267c7a77c15d292820eb3c36 2026-09-09 21:01:28+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mv4gnst4o42s 2026-09-10 01:23:22+00:00| seen|...
CVE-2026-86080 n8n: GitHub Trigger 422 Reuse Path Skips Webhook Secret Storage, Causing Signature Verification to Fail-Open
n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, the GitHub Trigger generated a webhook secret but discarded it when GitHub returned HTTP 422 and the node reused an existing webhook. Workflow static data then retained webhookId without webhookSecret, and...
CVE-2026-86080
n8n , an open source workflow automation platform, is affected by a fail-open signature verification flaw in its GitHub Trigger . When GitHub returns HTTP 422 and the node reuses an existing webhook, the generated webhook secret is discarded , leaving workflow static data with a webhookId but no ...
CVE-2026-86080 n8n: GitHub Trigger 422 Reuse Path Skips Webhook Secret Storage, Causing Signature Verification to Fail-Open
n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, the GitHub Trigger generated a webhook secret but discarded it when GitHub returned HTTP 422 and the node reused an existing webhook. Workflow static data then retained webhookId without webhookSecret, and...
CVE-2026-86080 n8n: GitHub Trigger 422 Reuse Path Skips Webhook Secret Storage, Causing Signature Verification to Fail-Open
n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, the GitHub Trigger generated a webhook secret but discarded it when GitHub returned HTTP 422 and the node reused an existing webhook. Workflow static data then retained webhookId without webhookSecret, and...
NPM: sharp: Vulnerabilities in libheif: GHSA-g89c-p67h-r497 and GHSA-2jg2-4ch7-h545
NPM: sharp: Vulnerabilities in libheif: GHSA-g89c-p67h-r497 and GHSA-2jg2-4ch7-h545 discovered by ? in WordPress Npm sharp versions 0.35.4...
GHSA-R3HF-PF7X-WGQG vulnerabilities
Vulnerabilities for packages: eco-python-openssl...
CVE-2026-73262
creationtimestamp| type| source ---|---|--- 2026-09-08 20:35:22+00:00| published-proof-of-concept| https://github.com/prowler-cloud/prowler/security/advisories/GHSA-c2jg-2778-ggm4...
CVE-2026-69222
creationtimestamp| type| source ---|---|--- 2026-09-08 20:35:20+00:00| published-proof-of-concept| https://github.com/harttle/liquidjs/security/advisories/GHSA-4r6h-5v86-94p3...
CVE-2026-73087
creationtimestamp| type| source ---|---|--- 2026-09-08 20:35:17+00:00| published-proof-of-concept| https://github.com/amir20/dozzle/security/advisories/GHSA-p2w3-6x73-2f6x...
CVE-2026-78675
creationtimestamp| type| source ---|---|--- 2026-09-08 20:35:14+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-7833-fr7j-v32q...
CVE-2026-78678
creationtimestamp| type| source ---|---|--- 2026-09-08 20:35:07+00:00| published-proof-of-concept| https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-5xxx-qhh7-9287...
CVE-2026-78677
creationtimestamp| type| source ---|---|--- 2026-09-08 20:35:04+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-8mcc-hrx5-hvxc...
CVE-2026-87049
A flaw was found in operator-foundry. Untrusted external actors can exploit over-permissive GitHub access tokens and Google Cloud Platform GCP Workload Identity Federation credentials granted to a third-party reusable workflow. By invoking this workflow on untrusted-triggerable events without...
CVE-2026-62385
creationtimestamp| type| source ---|---|--- 2026-09-08 18:35:32+00:00| published-proof-of-concept| https://github.com/nltk/nltk/security/advisories/GHSA-568f-pv23-39p4...