PT-2026-56441

n8n before 1.123.55, 2.25.7, and 2.26.2 contains an authorization vulnerability in three mutating evaluation test-run endpoints that authorize state-changing actions using the workflow:read scope instead of the action-appropriate workflow:execute scope. On instances using Advanced Permissions...

PT-2026-56399

Unauthenticated callers can supply a malicious H2 JDBC URL through the testConnection API, which executes arbitrary Java code on the server via H2's INIT parameter. Vulnerability in Apache Gravitino. This issue affects Apache Gravitino: before 1.2.1. Users are recommended to upgrade to version...

Medium: opensc

Issue Overview: A flaw has been found in OpenSC up to 0.26.1. This affects the function testkpgencertwrite of the file src/tools/pkcs11-tool.c of the component pkcs11-tool Key Generation Module. This manipulation causes buffer overflow. The attack is possible to be carried out remotely. The...

PT-2026-56608

Name of the Vulnerable Software and Affected Versions Appium versions prior to 10.7.0 Description The base-driver unconditionally mounts the '/test/guinea-pig', '/test/guinea-pig-scrollable', and '/test/guinea-pig-app-banner' endpoints. The compileLodashTemplate function reflects the throwError...

Exploit for Command Injection in Litellm

─── CVE-2026-42271 ─── 🛡️ AMN SECURITY 🛡️ مركز أ...

MAL-2026-7422 Malicious code in smtp-test-server-node (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in smtp-test-server-node (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in chai-chain-test (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-7242 Malicious code in chai-chain-test (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in chai-as-test (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-7240 Malicious code in chai-as-test (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in southwark-test-f8e1778549558 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-8848 Malicious code in southwark-test-f8e1778549558 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-8836 Malicious code in southnews-test-35329 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in southnews-test-35329 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in civic-test-scrape-out (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-7601 Malicious code in civic-test-scrape-out (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in civic-test-scrape (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-7600 Malicious code in civic-test-scrape (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

PYSEC-2026-1168 Apache Superset has improper default REST API permission for Gamma users

An improper default REST API permission for Gamma users in Apache Superset up to and including 2.1.0 allows for an authenticated Gamma user to test database connections...