GHSA-PMQW-72CG-WX85 n8n: Credential Exfiltration via Permission Bypass

Impact A member-level user with editor access to a shared workflow could reference credentials they do not own via specific public API endpoints. Credential ownership checks were only enforced partially leading to cross-user credential access. This issue affects instances where workflow sharing i...

CVE-2025-13230 affecting package nodejs for versions less than 24.14.1-3

CVE-2025-13230 affecting package nodejs for versions less than 24.14.1-3. An upgraded version of the package is available that resolves this issue...

CVE-2025-47913 affecting package buildah for versions less than 1.43.1-1

CVE-2025-47913 affecting package buildah for versions less than 1.43.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-31698 affecting package kernel for versions less than 6.6.137.1-2

CVE-2026-31698 affecting package kernel for versions less than 6.6.137.1-2. An upgraded version of the package is available that resolves this issue...

CVE-2026-31418 affecting package kernel for versions less than 6.6.134.1-2

CVE-2026-31418 affecting package kernel for versions less than 6.6.134.1-2. An upgraded version of the package is available that resolves this issue...

CVE-2026-31495 affecting package kernel for versions less than 6.6.134.1-2

CVE-2026-31495 affecting package kernel for versions less than 6.6.134.1-2. An upgraded version of the package is available that resolves this issue...

CVE-2026-31655 affecting package kernel for versions less than 6.6.137.1-1

CVE-2026-31655 affecting package kernel for versions less than 6.6.137.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-31566 affecting package kernel for versions less than 6.6.134.1-2

CVE-2026-31566 affecting package kernel for versions less than 6.6.134.1-2. An upgraded version of the package is available that resolves this issue...

CVE-2026-31496 affecting package kernel for versions less than 6.6.134.1-2

CVE-2026-31496 affecting package kernel for versions less than 6.6.134.1-2. An upgraded version of the package is available that resolves this issue...

CVE-2026-23228 affecting package kernel for versions less than 5.15.202.1-1

CVE-2026-23228 affecting package kernel for versions less than 5.15.202.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-23291 affecting package kernel for versions less than 6.6.130.1-1

CVE-2026-23291 affecting package kernel for versions less than 6.6.130.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-23347 affecting package kernel for versions less than 6.6.130.1-1

CVE-2026-23347 affecting package kernel for versions less than 6.6.130.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-23285 affecting package kernel for versions less than 6.6.130.1-1

CVE-2026-23285 affecting package kernel for versions less than 6.6.130.1-1. An upgraded version of the package is available that resolves this issue...

Allocation of Resources Without Limits or Throttling

Overview activesupport is a toolkit of support libraries and Ruby core extensions extracted from the Rails framework. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in NumberConverter. An attacker can cause excessive memory allocation by...

CVE-2026-28420 affecting package vim for versions less than 9.2.0088-1

CVE-2026-28420 affecting package vim for versions less than 9.2.0088-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-39873 affecting package kernel for versions less than 5.15.200.1-1

CVE-2025-39873 affecting package kernel for versions less than 5.15.200.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-38701 affecting package kernel for versions less than 5.15.200.1-1

CVE-2025-38701 affecting package kernel for versions less than 5.15.200.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-22997 affecting package kernel for versions less than 5.15.200.1-1

CVE-2026-22997 affecting package kernel for versions less than 5.15.200.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-38439 affecting package kernel for versions less than 5.15.200.1-1

CVE-2025-38439 affecting package kernel for versions less than 5.15.200.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-39860 affecting package kernel for versions less than 5.15.200.1-1

CVE-2025-39860 affecting package kernel for versions less than 5.15.200.1-1. An upgraded version of the package is available that resolves this issue...