Facebook React has a Denial of Service Vulnerability in React Server Components

Impact A denial of service vulnerability could be triggered by sending specially crafted HTTP requests to server function endpoints, this could lead to out-of-memory exceptions or excessive CPU usage. We recommend updating immediately. The vulnerability exists in versions 19.0.0 through 19.0.5,...

CVE-2026-43191 affecting package kernel for versions less than 6.6.137.1-2

CVE-2026-43191 affecting package kernel for versions less than 6.6.137.1-2. An upgraded version of the package is available that resolves this issue...

CVE-2026-31577 affecting package kernel for versions less than 6.6.137.1-1

CVE-2026-31577 affecting package kernel for versions less than 6.6.137.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-31555 affecting package kernel for versions less than 6.6.134.1-2

CVE-2026-31555 affecting package kernel for versions less than 6.6.134.1-2. An upgraded version of the package is available that resolves this issue...

CVE-2026-31494 affecting package kernel for versions less than 6.6.134.1-2

CVE-2026-31494 affecting package kernel for versions less than 6.6.134.1-2. An upgraded version of the package is available that resolves this issue...

CVE-2026-23300 affecting package kernel for versions less than 6.6.130.1-1

CVE-2026-23300 affecting package kernel for versions less than 6.6.130.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-23281 affecting package kernel for versions less than 6.6.130.1-1

CVE-2026-23281 affecting package kernel for versions less than 6.6.130.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-23368 affecting package kernel for versions less than 6.6.130.1-1

CVE-2026-23368 affecting package kernel for versions less than 6.6.130.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-23317 affecting package kernel for versions less than 6.6.130.1-1

CVE-2026-23317 affecting package kernel for versions less than 6.6.130.1-1. An upgraded version of the package is available that resolves this issue...

GHSA-364X-8G5J-X2PR n8n has XSS in its Credential Management Flow

Impact An authenticated user with permission to create and share credentials could craft a malicious OAuth2 credential containing a JavaScript URL in the Authorization URL field. If a victim opened the credential and interacted with the OAuth authorization button, the injected script would execut...

CVE-2024-14027 affecting package kernel for versions less than 6.6.126.1-1

CVE-2024-14027 affecting package kernel for versions less than 6.6.126.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-38583 affecting package kernel for versions less than 5.15.200.1-1

CVE-2025-38583 affecting package kernel for versions less than 5.15.200.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-38249 affecting package kernel for versions less than 5.15.200.1-1

CVE-2025-38249 affecting package kernel for versions less than 5.15.200.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-22999 affecting package kernel for versions less than 5.15.200.1-1

CVE-2026-22999 affecting package kernel for versions less than 5.15.200.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-38706 affecting package kernel for versions less than 5.15.200.1-1

CVE-2025-38706 affecting package kernel for versions less than 5.15.200.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-38347 affecting package kernel for versions less than 5.15.200.1-1

CVE-2025-38347 affecting package kernel for versions less than 5.15.200.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-39949 affecting package kernel for versions less than 5.15.200.1-1

CVE-2025-39949 affecting package kernel for versions less than 5.15.200.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-39894 affecting package kernel for versions less than 5.15.200.1-1

CVE-2025-39894 affecting package kernel for versions less than 5.15.200.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-39824 affecting package kernel for versions less than 5.15.200.1-1

CVE-2025-39824 affecting package kernel for versions less than 5.15.200.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-38461 affecting package kernel for versions less than 5.15.200.1-1

CVE-2025-38461 affecting package kernel for versions less than 5.15.200.1-1. An upgraded version of the package is available that resolves this issue...