CVE-2026-77075

n8n's editor splices resource-locator field values into node URL templates without expression-syntax checks, enabling an authenticated user to inject JavaScript evaluated in another user's session. CVSS 8.4 HIGH. Affected: <1.123.69, 2.x <2.33.4, 2.34.x

CVE-2020-8291: Improper Neutralization of Input During Web Page Generation

A link preview rendering issue in Rocket.Chat versions before 3.9 could lead to potential XSS attacks...

Rocket.Chat cross-site scripting vulnerability

Rocket.Chat is an open source team chat software. A cross-site scripting vulnerability exists in versions prior to Rocket.Chat 3.9, which stems from an issue with the rendering of the application's link previews that could lead to potential XSS attacks...