CVE-2026-65599 n8n before 1.123.64, 2.29.8, and 2.30.1 Credential Exposure via JWT Header

n8n versions before 1.123.64, 2.29.8, and 2.30.1 contain a credential exposure vulnerability: when configured with a Google Service Account key, the full PEM private key was mistakenly placed in the JWT header's kid field intended only for a key identifier. Because JWT headers are Base64-encoded...

CVE-2026-65599 n8n before 1.123.64, 2.29.8, and 2.30.1 Credential Exposure via JWT Header

n8n versions before 1.123.64, 2.29.8, and 2.30.1 contain a credential exposure vulnerability: when configured with a Google Service Account key, the full PEM private key was mistakenly placed in the JWT header's kid field intended only for a key identifier. Because JWT headers are Base64-encoded...

libreoffice: LibreOffice Calc: Arbitrary code execution via heap buffer overflow in formula compilation

A vulnerability has been identified in LibreOffice Calc. An application crash may occur if a user opens a malicious spreadsheet that contains excessively long formulas. Successful exploitation of this vulnerability could result in a denial of service or potentially lead to arbitrary code executio...

CVE-2026-47667

A flaw was found in the CImg Library, a C++ library for image processing. This vulnerability allows a remote attacker to cause a denial of service DoS by providing a specially crafted image file. The library incorrectly handles the header size when processing Analyze/NIfTI files, leading to...

CVE-2026-16318

A flaw was found in s2n-tls, a Transport Layer Security TLS implementation. An unauthenticated remote attacker can exploit a memory leak in the QUIC transport parameters extension handler. By repeatedly forcing HelloRetryRequests during a TLS 1.3 connection, an attacker can cause the server proce...

libreoffice: LibreOffice Calc: Arbitrary code execution via heap buffer overflow in formula compilation

A vulnerability has been identified in LibreOffice Calc. An application crash may occur if a user opens a malicious spreadsheet that contains excessively long formulas. Successful exploitation of this vulnerability could result in a denial of service or potentially lead to arbitrary code executio...

CVE-2026-59877

A flaw was found in protobufjs, a JavaScript JS library for compiling protobuf definitions. A remote attacker could exploit this vulnerability by providing a specially crafted .proto schema. This schema, designed to prematurely end an option declaration, can cause the library's parsing functions ...

CVE-2026-14551

The servereye client also known as sensorhub, technically ClientAgentContainerService versions 20.15 and earlier are vulnerable to Local Privilege Escalation. The high-privileged service SE3Recovery EmergencyRecoveryService.exe, running as SYSTEM, periodically monitors the directory...

CVE-2026-14551

CVE-2026-14551 affects the servereye client (sensorhub), version 20.15 and earlier. A local privilege escalation occurs via the SE3Recovery service (EmergencyRecoveryService.exe), which runs as SYSTEM and periodically watches %ProgramData%\ServerEye3\update\ for a trigger file named update_availa...

Security Bulletin: Multiple vulnerabilities impact AIX due to OpenSSL

Summary Vulnerabilities in OpenSSL could cause denial of service CVE-2026-9076, CVE-2026-42767, CVE-2026-42766, heap buffer overflow CVE-2026-7383, crash and heap corruption CVE-2026-45447, forge authentication CVE-2026-45446, loss of confidentiality CVE-2026-45445, credential exposure...

Security Bulletin: IBM Sterling Connect:Direct Web Services is Affected by Multiple Vulnerabilities.

Summary spring-webmvc-7.0.7.jar is used by IBM Sterling Connect:Direct Web Services CVE-2026-41841, CVE-2026-41842, CVE-2026-41843, CVE-2026-41844, CVE-2026-41846. Vulnerability Details CVEID:CVE-2026-41841 DESCRIPTION: Spring MVC and WebFlux applications are vulnerable to Information Disclosure...

Security update for libgcrypt

This update for libgcrypt fixes the following issue CVE-2026-41989: heap-based buffer overflow when processing crafted ECDH ciphertext can lead to a denial of service bsc1262684. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate o...

SUSE-SU-2026:3182-1 Security update for libgcrypt

This update for libgcrypt fixes the following issue - CVE-2026-41989: heap-based buffer overflow when processing crafted ECDH ciphertext can lead to a denial of service bsc1262684...

Security update for python3-sqlparse

This update for python3-sqlparse fixes the following issue Fixed an issue where formatting list of tuples leads to denial of service bsc1268597. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively yo...

SUSE-SU-2026:3181-1 Security update for python3-sqlparse

This update for python3-sqlparse fixes the following issue - Fixed an issue where formatting list of tuples leads to denial of service bsc1268597...

Security update for python-sqlparse

This update for python-sqlparse fixes the following issue Fixed a bug where formatting list of tuples leads to denial of service bsc1268597. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you ca...

SUSE-SU-2026:3180-1 Security update for python-sqlparse

This update for python-sqlparse fixes the following issue - Fixed a bug where formatting list of tuples leads to denial of service bsc1268597...

Security update for python-sqlparse

This update for python-sqlparse fixes the following issue Fixed a bug where formatting list of tuples leads to denial of service bsc1268597. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you ca...

SUSE-SU-2026:3179-1 Security update for python-sqlparse

This update for python-sqlparse fixes the following issue - Fixed a bug where formatting list of tuples leads to denial of service bsc1268597...

CVE-2026-3821

Supermicro SMC SMASH services contain an Arbitrary code execution issue in X14DBG-DAP and X14DBI. An authorized attacker can exploit SMASH’s input capability to compromise data integrity or launch a Denial-of-Service DoS attack against the BMC...