Description of the security update for SharePoint Server 2019: December 9, 2025 (KB5002816)

None None...

Description of the security update for SharePoint Server 2016: December 9, 2025 (KB5002821)

None None...

CVE-2025-65964

n8n is an open source workflow automation platform. Versions 0.123.1 through 1.119.1 do not have adequate protections to prevent RCE through the project's pre-commit hooks. The Add Config operation allows workflows to set arbitrary Git configuration values, including core.hooksPath, which can poi...

GCVE-1-2025-0030

MISP 2.5.27 Stored XSS Exploitation Vulnerability Identifie...

Exploit for Cross-site Scripting in Misp

MISP 2.5.27 Stored XSS Exploitation Vulnerability Identifie...

CVE-2025-33214: Deserialization of Untrusted Data

NVIDIA NVTabular for Linux contains a vulnerability in the Workflow component, where a user could cause a deserialization issue. A successful exploit of this vulnerability might lead to code execution, denial of service, information disclosure, and data tampering...

NVIDIA NVTabular code-related vulnerabilities

NVIDIA NVTabular is a component of a deep learning recommender system framework from NVIDIA, USA. A deserialization vulnerability exists in NVIDIA NVTabular, which arises from unsafe deserialization of serialized data received from users by the Workflow component and can be exploited by an attack...

@n8n/ai-workflow-builder (0.30.0), @n8n/task-runner (1.56.0) +2 more potentially affected by CVE-2025-65964 via @n8n/config (1.62.0)

@n8n/config NPM version 1.62.0 is affected by a known vulnerability. The following packages have a transitive dependency on @n8n/config and may be impacted: - @n8n/ai-workflow-builder 0.30.0 - @n8n/task-runner 1.56.0 - n8n-core =1.119.0, =1.119.1 - n8n-node-dev 1.118.0 Source cves: CVE-2025-65964...

CVE-2025-66515 Nextcloud Approval app allows users to request approval for other users file

The Nextcloud Approval app allows approval or disapproval of files in the sidebar. Prior to 1.3.1 and 2.5.0, an authenticated user listed as a requester in a workflow can set another user’s file into the “pending approval” without access to the file by using the numeric file id. This vulnerabilit...

EUVD-2025-201457

The Nextcloud Approval app allows approval or disapproval of files in the sidebar. Prior to 1.3.1 and 2.5.0, an authenticated user listed as a requester in a workflow can set another user’s file into the “pending approval” without access to the file by using the numeric file id. This vulnerabilit...

Approval app allows users to request approval for other users file

None...

CVE-2025-66515: Improper Authentication

The Nextcloud Approval app allows approval or disapproval of files in the sidebar. Prior to 1.3.1 and 2.5.0, an authenticated user listed as a requester in a workflow can set another user’s file into the “pending approval” without access to the file by using the numeric file id. This vulnerabilit...

PT-2025-49295

Name of the Vulnerable Software and Affected Versions Nextcloud Approval app versions prior to 1.3.1 Nextcloud Approval app versions prior to 2.5.0 Description The Nextcloud Approval app has an issue where an authenticated user, listed as a requester in a workflow, can set another user’s file to...

@0xlimao/n8n-nodes-ethereum (0.1.1), @adhiraj2486/n8n-nodes-vigorus (1.0.8) +749 more potentially affected by CVE-2025-68668 via n8n-workflow (>=1.0.0, <=2.0.0-rc.0)

n8n-workflow NPM version =1.0.0, =0.1.0, =0.1.0, =1.0.0, =1.0.0, =0.2.0, =0.5.2, =1.0.1, =0.1.0, =0.1.5, =1.0.0, =0.1.1, =0.1.4 and more Source cves: CVE-2025-68668 Source advisory: SNYK:JS-N8NWORKFLOW-14723277...

Remote Code Execution (RCE)

Overview n8n-workflow is a Workflow base code of n8n Affected versions of this package are vulnerable to Remote Code Execution RCE due to insufficient isolation in the Python Code Node that uses Pyodide. An authenticated attacker with permissions to create or modify workflows can execute arbitrar...

CVE-2025-13129

Improper Enforcement of Behavioral Workflow vulnerability in Seneka Software Hardware Information Technology Trade Contracting and Industry Ltd. Co. Onaylarım allows Functionality Misuse.This issue affects Onaylarım: from 25.09.26.01 through 18112025...

Debian dla-4391 : python3-mistralclient - security update

The remote Debian 11 host has a package installed that is affected by a vulnerability as referenced in the dla-4391 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4391-1 [email protected] https://www.debian.org/lts/security/...

Security Bulletin: Due to use of Business Automation Workflow, Cloud Pak System is affected by out-of-bounds write vulnerability [CVE-2022-42920]

Summary IBM Business Automation Workflow is shipped as IBM Business Automation Workflow Pattern Type pType of IBM Cloud Pak System. Vulnerability Details CVEID:CVE-2022-42920 DESCRIPTION: Apache Commons BCEL has a number of APIs that would normally only allow changing specific class...

EUVD-2025-200004

Improper Enforcement of Behavioral Workflow vulnerability in Seneka Software Hardware Information Technology Trade Contracting and Industry Ltd. Co. Onaylarım allows Functionality Misuse.This issue affects Onaylarım: from 25.09.26.01 through 18112025...

CVE-2025-13129

Improper Enforcement of Behavioral Workflow vulnerability in Seneka Software Hardware Information Technology Trade Contracting and Industry Ltd. Co. Onaylarım allows Functionality Misuse. This issue affects Onaylarım: from 25.09.26.01 through 18112025...