EUVD-2026-38471

n8n is an open source workflow automation platform. Prior to 2.25.7 and 2.26.2, an authenticated user with permission to create or modify workflows could pollute the sandbox used by the Merge node's SQL Query mode. Because the sandbox context was cached and reused across all workflow executions o...

CVE-2024-38524

GeoServer/GeoWebCacheDispatcher.handleFrontPage has no check to hide sensitive information, exposing storage locations, config file paths, and temporarily server-start-time via the GeoWebCache home page. Affected component is org.geowebcache.GeoWebCacheDispatcher.handleFrontPage(HttpServletReques...