Lucene search
+L

254863 matches found

Patchstack
Patchstack
added 2026/07/22 10:1 p.m.10 views

NPM: n8n: Authenticated SSRF via Dynamic Node Parameters Endpoints Allows Internal Network Access

NPM: n8n: Authenticated SSRF via Dynamic Node Parameters Endpoints Allows Internal Network Access vulnerability discovered by ? in WordPress Npm n8n versions 1.123.64...

6.3CVSS5.2AI score0.00143EPSS
SaveExploits0References7Affected Software1
OSV
OSV
added 2026/07/22 10:1 p.m.6 views

GHSA-9W78-79Q7-R4FP n8n: Authenticated SSRF via Dynamic Node Parameters Endpoints Allows Internal Network Access

Impact Endpoints in /rest/dynamic-node-parameters/ lacked authorization scopes, making it reachable by any authenticated user with no workflow creation or execution required. By supplying an absolute URL in the routing configuration, a caller could override the node type's declared baseURL,...

6.3CVSS5.9AI score0.00143EPSS
SaveExploits0References7
EUVD
EUVD
added 2026/07/22 9:54 p.m.15 views

EUVD-2026-42613

n8n: Shared Credential Header Leak via HTTP Request Pagination Expression...

7.1CVSS5.2AI score0.00295EPSS
SaveExploits0References4
OSV
OSV
added 2026/07/22 8:39 p.m.8 views

MAL-2026-11012 Malicious code in encryptstringadmin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6e862c6a1d5cf9a77c2060f767e7144e9a73b77913c801dbf23f571ca5d3e054 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

5.5AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/07/22 8:39 p.m.19 views

Malicious code in encryptstringadmincore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fb9468e3d6f153d718527bb4350b6593d64b67cf16b5b81cdf56e4781d1b483 The package's main module core.js is heavily obfuscated obfuscator.io-style string-array with self-defending anti-debug and control-flow flattening a...

6.7AI score
SaveExploits0References2
OSV
OSV
added 2026/07/22 8:39 p.m.4 views

MAL-2026-11013 Malicious code in encryptstringadmincore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fb9468e3d6f153d718527bb4350b6593d64b67cf16b5b81cdf56e4781d1b483 The package's main module core.js is heavily obfuscated obfuscator.io-style string-array with self-defending anti-debug and control-flow flattening a...

6.7AI score
SaveExploits0References2
OSV
OSV
added 2026/07/22 8:33 p.m.6 views

MAL-2026-11004 Malicious code in n8n-nodes-pwn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae8222d3f90f4cff83a0840ee03f4b127946274f0215a73eadd6008404a2276e The package's Pwn.node.js executes malicious code at module load time when n8n loads this community node. It opens a TCP socket to 10.0.0.145:4444 an...

5.8AI score
SaveExploits0References5
OSV
OSV
added 2026/07/22 8:31 p.m.3 views

MAL-2026-11006 Malicious code in n8n-nodes-utils-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9256e5f20f66f3eb9875dcc475299249173730d784230eb157c327171d114e21 The package advertises itself as an n8n community node 'Utility nodes for n8n', but the declared community node file MyNode.js is an empty stub and t...

5.4AI score
SaveExploits0References3
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/07/22 8:24 p.m.17 views

Malicious code in n8n-nodes-task-runner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 991093c97f0d954740c4b72a2e7725a501df211c94634979ebadc52652f2ebe8 The package impersonates the n8n task-runner subsystem but its shipped n8n node MyNode.js is a no-op stub whose execute returns . The real payload...

5.4AI score
SaveExploits0References17
OSV
OSV
added 2026/07/22 8:24 p.m.12 views

MAL-2026-10999 Malicious code in n8n-nodes-task-runner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 991093c97f0d954740c4b72a2e7725a501df211c94634979ebadc52652f2ebe8 The package impersonates the n8n task-runner subsystem but its shipped n8n node MyNode.js is a no-op stub whose execute returns . The real payload...

5.4AI score
SaveExploits0References17
Patchstack
Patchstack
added 2026/07/22 5:56 p.m.9 views

NPM: n8n: Race Condition in Git Clone Node Allows Authenticated Users to Achieve Remote Code Execution

NPM: n8n: Race Condition in Git Clone Node Allows Authenticated Users to Achieve Remote Code Execution vulnerability discovered by ? in WordPress Npm n8n versions 1.123.64...

8.9CVSS5.5AI score0.00241EPSS
SaveExploits0References7Affected Software1
Github Security Blog
Github Security Blog
added 2026/07/22 5:56 p.m.8 views

n8n: Race Condition in Git Clone Node Allows Authenticated Users to Achieve Remote Code Execution

Impact A TOCTOU race condition in the Git node's clone operation lets an authenticated user bypass its path restrictions by swapping a directory for a symlink after the path is validated but before the clone runs. This plants a crafted repository in the community node directory, which n8n loads a...

8.9CVSS6.4AI score0.00241EPSS
SaveExploits0References7Affected Software1
OSV
OSV
added 2026/07/22 5:56 p.m.7 views

GHSA-G3R5-9H93-4J2C n8n: Race Condition in Git Clone Node Allows Authenticated Users to Achieve Remote Code Execution

Impact A TOCTOU race condition in the Git node's clone operation lets an authenticated user bypass its path restrictions by swapping a directory for a symlink after the path is validated but before the clone runs. This plants a crafted repository in the community node directory, which n8n loads a...

8.9CVSS6.5AI score0.00241EPSS
SaveExploits0References7
Patchstack
Patchstack
added 2026/07/22 5:55 p.m.9 views

NPM: n8n: AI Agents Project Viewer Privilege Escalation via run_node_tool

NPM: n8n: AI Agents Project Viewer Privilege Escalation via runnodetool vulnerability discovered by ? in WordPress Npm n8n versions 2.29.8...

8.8CVSS5.2AI score0.00324EPSS
SaveExploits0References6Affected Software1
OSV
OSV
added 2026/07/22 5:55 p.m.7 views

GHSA-X5VX-C2C8-M3W9 n8n: AI Agents Project Viewer Privilege Escalation via run_node_tool

Impact In n8n's AI Agents feature, a user with the read-only Project Viewer role could escalate their privileges by chatting with an agent that has node tools enabled. The agent's node-execution tool was authorized only by the agent:execute scope and ran nodes using the project's credentials,...

7.2CVSS6.4AI score0.00324EPSS
SaveExploits0References6
Github Security Blog
Github Security Blog
added 2026/07/22 5:55 p.m.11 views

n8n: AI Agents Project Viewer Privilege Escalation via run_node_tool

Impact In n8n's AI Agents feature, a user with the read-only Project Viewer role could escalate their privileges by chatting with an agent that has node tools enabled. The agent's node-execution tool was authorized only by the agent:execute scope and ran nodes using the project's credentials,...

8.8CVSS6.3AI score0.00324EPSS
SaveExploits0References6Affected Software1
EUVD
EUVD
added 2026/07/22 1:9 p.m.10 views

EUVD-2026-47678

In NLnet Labs Unbound 1.18.0 up to and including 1.25.1, when Unbound listens on a 'proxy-protocol-port' interface with 'answer-cookie: yes', the RFC 9018 server-cookie SipHash is computed over the proxy's wire address instead of the PROXYv2-declared client. One server cookie obtained through a...

3.7CVSS5.3AI score0.00178EPSS
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/07/22 1:0 p.m.15 views

Malicious code in react-tabulix-extended (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e8df06223a5059cf4892135df7f8144e8857ad8c4dbf66d358691597badc36a package.json declares preinstall: node./dist/index.d.js, which fires automatically on npm install. The script contains a base64-encoded payload that...

6.1AI score
SaveExploits0References1
Github Security Blog
Github Security Blog
added 2026/07/22 12:32 p.m.10 views

Duplicate Advisory: Race Condition in Git Clone Node Allows Authenticated Users to Achieve Remote Code Execution

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-g3r5-9h93-4j2c. This link is maintained to preserve external references. Original Description n8n before 1.123.64, 2.29.8, and 2.30.1 contains a TOCTOU race condition in the Git node's clone operation that allow...

8.9CVSS5.4AI score0.00241EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2026/07/22 12:32 p.m.6 views

GHSA-725Q-C4VP-Q4CG Duplicate Advisory: Race Condition in Git Clone Node Allows Authenticated Users to Achieve Remote Code Execution

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-g3r5-9h93-4j2c. This link is maintained to preserve external references. Original Description n8n before 1.123.64, 2.29.8, and 2.30.1 contains a TOCTOU race condition in the Git node's clone operation that allow...

8.9CVSS5.6AI score0.00241EPSS
SaveExploits0References3
Rows per page
Query Builder