110111 matches found
CVE-2026-44878
creationtimestamp| type| source ---|---|--- 2026-07-22 14:55:18+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mraldxwopq2n...
CVE-2026-55717
creationtimestamp| type| source ---|---|--- 2026-07-22 14:41:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrakkgvgsy2a...
GHSA-C35G-MGC3-95RX
creationtimestamp| type| source ---|---|--- 2026-07-22 14:30:53+00:00| seen| https://infosec.exchange/users/mmguero/statuses/116964108001076474...
CVE-2026-56444
creationtimestamp| type| source ---|---|--- 2026-07-22 14:06:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mraimgxtjj2j...
CVE-2026-65598
creationtimestamp| type| source ---|---|--- 2026-07-22 13:04:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mraf5rtpf62i 2026-07-28 18:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrq2k4jcre22...
GHSA-H5XR-FQVJ-253P Duplicate Advisory: Stored DOM XSS via Resource Locator `cachedResultUrl`
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-9wcp-9r3j-383q. This link is maintained to preserve external references. Original Description n8n before 1.123.64, 2.29.8, and 2.30.1 contains a stored DOM cross-site scripting vulnerability in the Resource...
GHSA-38FJ-36M5-783C Duplicate Advisory: Authenticated SSRF via Dynamic Node Parameters Endpoints Allows Internal Network Access
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-9w78-79q7-r4fp. This link is maintained to preserve external references. Original Description n8n versions before 1.123.64 contain a server-side request forgery vulnerability in the dynamic-node-parameters...
CVE-2026-65593
n8n versions before 1.123.64, 2.29.8, and 2.30.1 contain a server-side request forgery vulnerability in the dynamic-node-parameters endpoints that lack authorization scopes. Authenticated attackers can supply absolute URLs in routing configuration to override baseURL restrictions and make the n8n...
GHSA-XJ6Q-8X83-JV6G
creationtimestamp| type| source ---|---|--- 2026-07-22 12:01:05+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mrabmi3jbs2x...
GHSA-MWF2-3PR3-8698
creationtimestamp| type| source ---|---|--- 2026-07-22 12:01:02+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mrabmenwc72g...
GHSA-MMX7-HFXF-JPPX
creationtimestamp| type| source ---|---|--- 2026-07-22 12:01:01+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mrabmdckvy24...
CVE-2026-16461
creationtimestamp| type| source ---|---|--- 2026-07-22 11:39:39+00:00| seen| https://bsky.app/profile/cybersecinsight.bsky.social/post/3mraag4n4sj2e 2026-07-23 22:33:18+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mrdvfulvbi24...
CVE-2026-65593
CVE-2026-65593 affects n8n versions before 1.123.64. A SSRF vulnerability exists in the dynamic-node-parameters endpoints that lack authorization scopes, allowing authenticated attackers to supply absolute URLs in routing configuration to bypass baseURL restrictions and cause the n8n server to is...
CVE-2026-65592
n8n is affected by a stored DOM XSS in the Resource Locator component for versions before 1.123.64, 2.29.8, and 2.30.1. The vulnerability arises because the workflow-persisted cachedResultUrl is passed to window.open() without scheme validation. An attacker with workflow creation/editing privileg...
CVE-2026-65592 n8n before 1.123.64 Stored DOM XSS via cachedResultUrl
n8n before 1.123.64, 2.29.8, and 2.30.1 contains a stored DOM cross-site scripting vulnerability in the Resource Locator component, which passes the workflow-persisted cachedResultUrl parameter to window.open without scheme validation. An attacker with workflow creation/editing privileges can cra...
EUVD-2026-47636
n8n before 1.123.64, 2.29.8, and 2.30.1 contains a stored DOM cross-site scripting vulnerability in the Resource Locator component, which passes the workflow-persisted cachedResultUrl parameter to window.open without scheme validation. An attacker with workflow creation/editing privileges can cra...
CVE-2026-63264
creationtimestamp| type| source ---|---|--- 2026-07-22 09:56:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mra2n66wfk2q...
GHSA-2RP8-MM9Q-FP49
creationtimestamp| type| source ---|---|--- 2026-07-22 08:31:19+00:00| seen| https://gist.github.com/alon710/200e1b4ca9b1b66d608a6e02108ba259...