CVE-2026-65599 n8n before 1.123.64, 2.29.8, and 2.30.1 Credential Exposure via JWT Header

n8n versions before 1.123.64, 2.29.8, and 2.30.1 contain a credential exposure vulnerability: when configured with a Google Service Account key, the full PEM private key was mistakenly placed in the JWT header's kid field intended only for a key identifier. Because JWT headers are Base64-encoded...

OPENSUSE-SU-2026:21413-1 Security update for google-cloud-sap-agent

This update for google-cloud-sap-agent fixes the following issue: - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation bsc1266604. Changes for google-cloud-sap-agent: - Update golang.org/x/net to v0.57....

SUSE-SU-2026:22848-1 Security update for google-cloud-sap-agent

This update for google-cloud-sap-agent fixes the following issue: - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation bsc1266604. Changes for google-cloud-sap-agent: - Update golang.org/x/net to v0.57....

CVE-2026-16424

creationtimestamp| type| source ---|---|--- 2026-07-22 04:45:29+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260722 2026-07-22 14:16:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mraj5tlbai2v 2026-07-22 14:55:25+00:00| seen|...

CVE-2026-16422

creationtimestamp| type| source ---|---|--- 2026-07-22 04:45:24+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260722 2026-07-22 14:55:25+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mrale6kak22g 2026-07-24 04:45:27+00:00| seen|...

CVE-2026-16421

creationtimestamp| type| source ---|---|--- 2026-07-22 04:45:22+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260722 2026-07-22 14:55:25+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mrale6kak22g 2026-07-22 22:49:01+00:00| seen|...

CVE-2026-16420

creationtimestamp| type| source ---|---|--- 2026-07-22 04:45:20+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260722 2026-07-22 14:55:25+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mrale6kak22g 2026-07-22 22:49:01+00:00| seen|...

CVE-2026-16418

creationtimestamp| type| source ---|---|--- 2026-07-22 04:45:15+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260722 2026-07-22 14:55:25+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mrale6kak22g 2026-07-24 04:45:17+00:00| seen|...

CVE-2026-16417

creationtimestamp| type| source ---|---|--- 2026-07-22 04:45:13+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260722 2026-07-22 14:55:24+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mrale6kak22g 2026-07-24 04:45:15+00:00| seen|...

CVE-2026-16416

creationtimestamp| type| source ---|---|--- 2026-07-22 04:45:10+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260722 2026-07-22 14:55:24+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mrale6kak22g 2026-07-24 04:45:11+00:00| seen|...

CVE-2026-16415

creationtimestamp| type| source ---|---|--- 2026-07-22 04:45:08+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260722 2026-07-22 14:55:24+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mrale6kak22g 2026-07-24 04:45:09+00:00| seen|...

CVE-2026-16414

creationtimestamp| type| source ---|---|--- 2026-07-22 04:45:06+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260722 2026-07-22 14:55:24+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mrale6kak22g 2026-07-24 04:45:06+00:00| seen|...

EUVD-2026-47567

Inappropriate implementation in WebAudio in Google Chrome prior to 150.0.7871.182 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

EUVD-2026-47575

Insufficient validation of untrusted input in Certificate in Google Chrome on Linux prior to 150.0.7871.182 allowed an attacker in a privileged network position to perform domain spoofing via malicious network traffic. Chromium security severity: High...

EUVD-2026-47576

Use after free in UI in Google Chrome prior to 150.0.7871.182 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

EUVD-2026-47571

Integer overflow in Chromecast in Google Chrome prior to 150.0.7871.182 allowed a local attacker to potentially perform a sandbox escape via malicious network traffic. Chromium security severity: High...

EUVD-2026-47573

Stack buffer overflow in V8 in Google Chrome prior to 150.0.7871.182 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

EUVD-2026-47569

Insufficient validation of untrusted input in Chromecast in Google Chrome prior to 150.0.7871.182 allowed a local attacker to potentially perform a sandbox escape via malicious network traffic. Chromium security severity: High...

EUVD-2026-47570

Insufficient validation of untrusted input in Extensions in Google Chrome prior to 150.0.7871.182 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page. Chromium security severity: High...

PT-2026-63362

A flaw was found in the Ansible Lightspeed extension for Visual Studio Code. This vulnerability allows an attacker with local access to the workstation, or malware running with the user's privileges, to read the Google Gemini API key. The extension insecurely stores the API key in plain text with...