CVE-2026-65590 n8n before 2.30.1 Shell Sandbox Bypass on Linux Windows

n8n before 2.29.8 and 2.30.x before 2.30.1 does not enforce shell sandbox restrictions on Linux and Windows in the @n8n/computer-use package sandboxing was applied only on macOS. Shell commands executed by the tool run without any filesystem or network restrictions, allowing unrestricted access t...

CVE-2026-65590 n8n before 2.30.1 Shell Sandbox Bypass on Linux Windows

n8n before 2.29.8 and 2.30.x before 2.30.1 does not enforce shell sandbox restrictions on Linux and Windows in the @n8n/computer-use package sandboxing was applied only on macOS. Shell commands executed by the tool run without any filesystem or network restrictions, allowing unrestricted access t...

EUVD-2026-47634

n8n before 2.29.8 and 2.30.x before 2.30.1 does not enforce shell sandbox restrictions on Linux and Windows in the @n8n/computer-use package sandboxing was applied only on macOS. Shell commands executed by the tool run without any filesystem or network restrictions, allowing unrestricted access t...

CVE-2026-65590 n8n before 2.30.1 Shell Sandbox Bypass on Linux Windows

n8n before 2.29.8 and 2.30.x before 2.30.1 does not enforce shell sandbox restrictions on Linux and Windows in the @n8n/computer-use package sandboxing was applied only on macOS. Shell commands executed by the tool run without any filesystem or network restrictions, allowing unrestricted access t...

ROOT-APP-NPM-CVE-2026-27699 CVE-2026-27699 in @rootio/basic-ftp - Patched by Root

Root has patched CVE-2026-27699 in the @rootio/basic-ftp package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-GHSA-6V7Q-WJVX-W8WG GHSA-6v7q-wjvx-w8wg in @rootio/basic-ftp - Patched by Root

Root has patched GHSA-6v7q-wjvx-w8wg in the @rootio/basic-ftp package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-44240 CVE-2026-44240 in @rootio/basic-ftp - Patched by Root

Root has patched CVE-2026-44240 in the @rootio/basic-ftp package for Root:npm. Multiple fixed versions available...

Malicious code in dev-helper-bg (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce930400319131adb4adf9f442340165a52a3ebd8320c497d1de05a3f896cac3 On import devhelper, devhelper/init.py calls startdecryptor at module top level, which spawns a daemon thread running decryptandrun. That function...

MAL-2026-10992 Malicious code in dev-helper-bg (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce930400319131adb4adf9f442340165a52a3ebd8320c497d1de05a3f896cac3 On import devhelper, devhelper/init.py calls startdecryptor at module top level, which spawns a daemon thread running decryptandrun. That function...

MAL-2026-10991 Malicious code in make-helper (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb2e6560048133cc76a9e325b02b2719f89d59c500d09409bb10b6f4afb14401 On import devhelper, the package's init.py starts a daemon thread that runs decryptor.decryptandrun: it fetches an AES-GCM key from the hardcoded...

Malicious code in make-helper (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb2e6560048133cc76a9e325b02b2719f89d59c500d09409bb10b6f4afb14401 On import devhelper, the package's init.py starts a daemon thread that runs decryptor.decryptandrun: it fetches an AES-GCM key from the hardcoded...

ROOT-APP-NPM-GHSA-5C6J-R48X-RMVQ GHSA-5c6j-r48x-rmvq in @rootio/serialize-javascript - Patched by Root

Root has patched GHSA-5c6j-r48x-rmvq in the @rootio/serialize-javascript package for Root:npm. Multiple fixed versions available...

CVE-2026-55379 vulnerabilities

Vulnerabilities for packages: label-studio, tensorflow-gpu-jupyter, open-webui, openstack-horizon-2025.2-fips, superset, text-generation-inference, openstack-horizon-2026.1, tritonserver-backend-vllm-cuda-13.0, openstack-horizon-2026.1-fips, superset-fips, lmcache-cuda-12.8, mlflow,...

GHSA-9HW9-CH79-4VH6 vulnerabilities

Vulnerabilities for packages: label-studio, tensorflow-gpu-jupyter, open-webui, openstack-horizon-2025.2-fips, superset, text-generation-inference, openstack-horizon-2026.1, tritonserver-backend-vllm-cuda-13.0, openstack-horizon-2026.1-fips, superset-fips, lmcache-cuda-12.8, mlflow,...

GHSA-PMV8-RQ9R-6J72 vulnerabilities

Vulnerabilities for packages: langfuse-fips, librechat, nextcloud-server, opensearch-dashboards, azurite, wazuh-dashboard, semaphore, wazuh-dashboard-fips, kibana, langfuse, lerna, kubeflow-centraldashboard, opensearch-dashboards-fips, redisinsight, prism, jitsucom-jitsu, awx...

GHSA-XJ6Q-8X83-JV6G vulnerabilities

Vulnerabilities for packages: langfuse-fips, librechat, nextcloud-server, opensearch-dashboards, wazuh-dashboard, semaphore, wazuh-dashboard-fips, kibana, langfuse, lerna, kubeflow-centraldashboard, opensearch-dashboards-fips, redisinsight, prism, jitsucom-jitsu, awx...

GHSA-42H9-826W-CGV3 vulnerabilities

Vulnerabilities for packages: langfuse-fips, librechat, nextcloud-server, opensearch-dashboards, azurite, wazuh-dashboard, semaphore, wazuh-dashboard-fips, kibana, langfuse, lerna, kubeflow-centraldashboard, opensearch-dashboards-fips, redisinsight, prism, jitsucom-jitsu, awx...

GHSA-GCFJ-64VW-6MP9 vulnerabilities

Vulnerabilities for packages: langfuse-fips, librechat, nextcloud-server, opensearch-dashboards, azurite, wazuh-dashboard, semaphore, wazuh-dashboard-fips, kibana, langfuse, lerna, kubeflow-centraldashboard, opensearch-dashboards-fips, redisinsight, prism, jitsucom-jitsu, awx...

GHSA-MWF2-3PR3-8698 vulnerabilities

Vulnerabilities for packages: langfuse-fips, librechat, nextcloud-server, opensearch-dashboards, wazuh-dashboard, semaphore, wazuh-dashboard-fips, kibana, langfuse, lerna, kubeflow-centraldashboard, opensearch-dashboards-fips, redisinsight, prism, jitsucom-jitsu, awx...

GHSA-F4GW-2P7V-4548 vulnerabilities

Vulnerabilities for packages: langfuse-fips, librechat, nextcloud-server, opensearch-dashboards, azurite, wazuh-dashboard, semaphore, wazuh-dashboard-fips, kibana, langfuse, lerna, kubeflow-centraldashboard, opensearch-dashboards-fips, redisinsight, prism, jitsucom-jitsu, awx...