33504 matches found
CVE-2026-84308
creationtimestamp| type| source ---|---|--- 2026-09-08 22:35:07+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-q97c-8qh3-fpc6...
CVE-2026-87062
A flaw was found in konflux-operator-tasks. GitHub Actions within this component are configured to use mutable tags or branches instead of specific, immutable commit SHAs. This vulnerability could allow a remote attacker to introduce malicious code into the build process if they compromise the...
CVE-2026-87050
A flaw was found in operator-foundry. GitHub Actions and reusable workflows within the component are referenced using mutable tags e.g., @v0, @v4 instead of fixed commit SHAs. This allows an attacker to potentially alter the code executed in the Continuous Integration CI pipeline through an...
GHSA-7HGX-277F-7VMG
creationtimestamp| type| source ---|---|--- 2026-09-08 22:32:40+00:00| seen| https://gist.github.com/alon710/945de2feac7eaeacc7983ae793855e7b 2026-09-09 00:00:05+00:00| seen| https://gist.github.com/alon710/945de2feac7eaeacc7983ae793855e7b...
CVE-2026-86996
creationtimestamp| type| source ---|---|--- 2026-09-08 22:32:40+00:00| seen| https://gist.github.com/alon710/945de2feac7eaeacc7983ae793855e7b 2026-09-09 00:00:05+00:00| seen| https://gist.github.com/alon710/945de2feac7eaeacc7983ae793855e7b...
CVE-2026-86080
n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, the GitHub Trigger generated a webhook secret but discarded it when GitHub returned HTTP 422 and the node reused an existing webhook. Workflow static data then retained webhookId without webhookSecret, and...
CVE-2026-79322
creationtimestamp| type| source ---|---|--- 2026-09-08 21:28:13+00:00| seen| https://gist.github.com/mrtantoine/417ee9b774f022bd747211b9eadc0069 2026-09-09 19:58:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/d7ln6a7y6dk2m 2026-09-10 01:21:24+00:00| seen|...
CVE-2026-79324
creationtimestamp| type| source ---|---|--- 2026-09-08 21:28:11+00:00| seen| https://gist.github.com/mrtantoine/4311aa0c267c7a77c15d292820eb3c36 2026-09-09 21:01:28+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mv4gnst4o42s 2026-09-10 01:23:22+00:00| seen|...
CVE-2026-79323
creationtimestamp| type| source ---|---|--- 2026-09-08 21:28:11+00:00| seen| https://gist.github.com/mrtantoine/4331a5f04f8309eb1799b257a7371f34 2026-09-09 20:00:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/itlffggmuxgud 2026-09-10 01:21:25+00:00| seen|...
CVE-2026-86080 n8n: GitHub Trigger 422 Reuse Path Skips Webhook Secret Storage, Causing Signature Verification to Fail-Open
n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, the GitHub Trigger generated a webhook secret but discarded it when GitHub returned HTTP 422 and the node reused an existing webhook. Workflow static data then retained webhookId without webhookSecret, and...
CVE-2026-86080 n8n: GitHub Trigger 422 Reuse Path Skips Webhook Secret Storage, Causing Signature Verification to Fail-Open
n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, the GitHub Trigger generated a webhook secret but discarded it when GitHub returned HTTP 422 and the node reused an existing webhook. Workflow static data then retained webhookId without webhookSecret, and...
CVE-2026-86080 n8n: GitHub Trigger 422 Reuse Path Skips Webhook Secret Storage, Causing Signature Verification to Fail-Open
n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, the GitHub Trigger generated a webhook secret but discarded it when GitHub returned HTTP 422 and the node reused an existing webhook. Workflow static data then retained webhookId without webhookSecret, and...
CVE-2026-86080
n8n , an open source workflow automation platform, is affected by a fail-open signature verification flaw in its GitHub Trigger . When GitHub returns HTTP 422 and the node reuses an existing webhook, the generated webhook secret is discarded , leaving workflow static data with a webhookId but no ...
GHSA-R3HF-PF7X-WGQG vulnerabilities
Vulnerabilities for packages: eco-python-openssl...
CVE-2026-73262
creationtimestamp| type| source ---|---|--- 2026-09-08 20:35:22+00:00| published-proof-of-concept| https://github.com/prowler-cloud/prowler/security/advisories/GHSA-c2jg-2778-ggm4...
CVE-2026-69222
creationtimestamp| type| source ---|---|--- 2026-09-08 20:35:20+00:00| published-proof-of-concept| https://github.com/harttle/liquidjs/security/advisories/GHSA-4r6h-5v86-94p3...
CVE-2026-73087
creationtimestamp| type| source ---|---|--- 2026-09-08 20:35:17+00:00| published-proof-of-concept| https://github.com/amir20/dozzle/security/advisories/GHSA-p2w3-6x73-2f6x...
CVE-2026-78675
creationtimestamp| type| source ---|---|--- 2026-09-08 20:35:14+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-7833-fr7j-v32q...
CVE-2026-78678
creationtimestamp| type| source ---|---|--- 2026-09-08 20:35:07+00:00| published-proof-of-concept| https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-5xxx-qhh7-9287...