15534 matches found
EUVD-2026-42262
n8n before 1.123.55, 2.25.7, and 2.26.2 contains an authorization vulnerability in three mutating evaluation test-run endpoints that authorize state-changing actions using the workflow:read scope instead of the action-appropriate workflow:execute scope. On instances using Advanced Permissions...
CVE-2026-56775
CVE-2026-56775 affects n8n prior to 1.123.55, 2.25.7, and 2.26.2. The issue is an authorization vulnerability in three mutating evaluation test-run endpoints that grant state-changing actions under the workflow:read scope instead of the action-appropriate workflow:execute scope. On systems using ...
CVE-2026-56775 n8n - Incorrect OAuth Scope Validation in Evaluation Test Runs Endpoints
n8n before 1.123.55, 2.25.7, and 2.26.2 contains an authorization vulnerability in three mutating evaluation test-run endpoints that authorize state-changing actions using the workflow:read scope instead of the action-appropriate workflow:execute scope. On instances using Advanced Permissions...
CVE-2026-41042
The CVE-2026-41042 issue affects Apache Gravitino prior to 1.2.1. Unauthenticated callers can supply a crafted H2 JDBC URL through testConnection, leading to arbitrary Java code execution on the server via H2 INIT. Exploitation is network-based with no user interaction, focused when H2 is used (c...
CVE-2026-41042 Apache Gravitino: Unauthenticated callers can supply a malicious H2 JDBC URL through the testConnection API, which executes arbitrary Java code on the server via H2's INIT parameter
Unauthenticated callers can supply a malicious H2 JDBC URL through the testConnection API, which executes arbitrary Java code on the server via H2's INIT parameter. Vulnerability in Apache Gravitino. This issue affects Apache Gravitino: before 1.2.1. Users are recommended to upgrade to version...
MAL-2026-6965 Malicious code in na-rony-test (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 73b485b2a162e7940eb348df343cb7bc4a1a84ab2533e71df742204df778e4b5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-6966 Malicious code in na-rony-test-karem (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cd6a8602ce62a88124613cbe7eb85e19a1ae122a0ee98c71676fe4969359888f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in na-rony-test-karem (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cd6a8602ce62a88124613cbe7eb85e19a1ae122a0ee98c71676fe4969359888f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Medium: opensc
Issue Overview: A flaw has been found in OpenSC up to 0.26.1. This affects the function testkpgencertwrite of the file src/tools/pkcs11-tool.c of the component pkcs11-tool Key Generation Module. This manipulation causes buffer overflow. The attack is possible to be carried out remotely. The...
MAL-2026-7422 Malicious code in smtp-test-server-node (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-7242 Malicious code in chai-chain-test (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-7240 Malicious code in chai-as-test (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in southwark-test-f8e1778549558 (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-8848 Malicious code in southwark-test-f8e1778549558 (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-8836 Malicious code in southnews-test-35329 (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in southnews-test-35329 (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in civic-test-scrape-out (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-7601 Malicious code in civic-test-scrape-out (RubyGems)
--- -= Per source details. Do not edit below this line.=-...