GHSA-H9FM-XCV2-QFW3 Duplicate Advisory: Unauthenticated Endpoint Allows Cancellation of Any User's Active Test Webhook

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-33q9-f52j-gc75. This link is maintained to preserve external references. Original Description n8n before 2.28.0 and before 2.27.4 on the 2.27.x branch registers the DELETE /$restEndpoint/test-webhook/:id endpoin...

GHSA-JQH4-M9W3-8HP9

creationtimestamp| type| source ---|---|--- 2026-07-22 12:00:59+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mrabmbavjt25 2026-08-12 12:01:33+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3msv3gmhtf62e...

MINI-7R75-J3MC-249J

Bulletin has no description...

CVE-2026-47010

A flaw was found in OpenJDK. ASAN reports a heap integrity violation...

CVE-2026-16392

creationtimestamp| type| source ---|---|--- 2026-07-22 04:47:16+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260722...

CVE-2026-16351

creationtimestamp| type| source ---|---|--- 2026-07-22 04:45:40+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260722 2026-07-22 16:26:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mraqgdbx2i22 2026-07-24 00:01:17+00:00| see...

CVE-2026-63262

creationtimestamp| type| source ---|---|--- 2026-07-22 03:04:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr7dms6imx23...

GHSA-8V84-F9PQ-WR9X vulnerabilities

Vulnerabilities for packages: tensorflow-gpu-jupyter, openstack-horizon-2025.2, openstack-horizon-2026.1, openstack-horizon-2026.1-fips, text-generation-inference, open-webui, superset, tritonserver-backend-vllm-cuda-13.0, lmcache-cuda-12.8, label-studio, openstack-horizon-2025.2-fips, mlflow,...

CVE-2026-62546

creationtimestamp| type| source ---|---|--- 2026-07-22 01:43:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr773trwh72i 2026-07-22 16:42:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrarcxmbpu23 2026-07-23 18:20:51+00:00| seen|...

CVE-2026-62516

creationtimestamp| type| source ---|---|--- 2026-07-22 01:33:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr76kv4tsj2g 2026-07-23 18:20:38+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...

CVE-2026-56819

creationtimestamp| type| source ---|---|--- 2026-07-22 01:00:11+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mr74onri4f2m 2026-07-22 02:42:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr7cf3wyvf23 2026-07-27 16:00:06+00:00| seen|...

EUVD-2026-47563

Feedbin commit 739884a contains an unauthenticated information disclosure vulnerability that allows unauthenticated attackers to retrieve private article content by sending requests to the entries text API endpoint, which skips the authorization before-action filter entirely. Attackers can iterat...

PT-2026-63447

Name of the Vulnerable Software and Affected Versions ONTAP versions 9.16.1 and higher Description An issue exists in the WebAuthn multi-factor authentication MFA configuration related to the Relying Party ID. An attacker possessing valid credentials could exploit this to bypass the MFA process...

PT-2026-63495

Name of the Vulnerable Software and Affected Versions OIDC::Lite versions through 0.12.1 Description An issue exists where ID Token signature verification can be bypassed due to a token-controlled algorithm allowlist in the verify function. When a caller does not specify a pinned algorithm, the...

CVE-2026-60259

creationtimestamp| type| source ---|---|--- 2026-07-21 23:30:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6xnk54l42r 2026-07-23 16:49:53+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-07-28 11:37:06+00:00| seen|...

CVE-2026-60249

creationtimestamp| type| source ---|---|--- 2026-07-21 23:22:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6x7ciqr42q 2026-07-23 16:49:30+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-07-26 23:07:07+00:00| seen|...

CVE-2026-56820

Netty is a network application framework for development of protocol servers and clients. In versions 4.2.0.Final through 4.2.15.Final and prior to 4.1.135.Final, OcspClient does not validate that the CertificateID in an OCSP response matches the requested CertificateID, which can lead to replay...

CVE-2026-56820

Netty is a network application framework for development of protocol servers and clients. In versions 4.2.0.Final through 4.2.15.Final and prior to 4.1.135.Final, OcspClient does not validate that the CertificateID in an OCSP response matches the requested CertificateID, which can lead to replay...

CVE-2026-56820

Netty is a network application framework for development of protocol servers and clients. In versions 4.2.0.Final through 4.2.15.Final and prior to 4.1.135.Final, OcspClient does not validate that the CertificateID in an OCSP response matches the requested CertificateID, which can lead to replay...

CVE-2026-60229

creationtimestamp| type| source ---|---|--- 2026-07-21 22:26:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6u36yys42a 2026-07-23 16:48:54+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-07-26 03:37:07+00:00| seen|...