Lucene search
+L

1786 matches found

HackRead
HackRead
•added 2026/02/05 3:06 p.m.•15 views

Godent Rolls Out Scanner-as-a-Service Model to Drive Digital Transformation in European Dentistry

Godent has announced the launch of its scanner-as-a-service program for European DSOs, combining free intraoral scanners with a fully integrated digital lab infrastructure to modernize dental workflows...

5.4AI score
SaveExploits0
Snyk
Snyk
•added 2026/02/04 6:15 p.m.•30 views

Cross-site Scripting (XSS)

Overview n8n-core is a Core functionality of n8n Affected versions of this package are vulnerable to Cross-site Scripting XSS due to improper enforcement of Content Security Policy in webhook response handling. An attacker can execute unauthorized scripts with same-origin privileges by crafting...

8.7CVSS5.3AI score0.00259EPSS
SaveExploits0References2
Github Security Blog
Github Security Blog
•added 2026/02/04 6:15 p.m.•32 views

n8n's Improper CSP Enforcement in Webhook Responses May Allow Stored XSS

Impact A Cross-site Scripting XSS vulnerability has been identified in the handling of webhook responses and related HTTP endpoints. Under certain conditions, the Content Security Policy CSP sandbox protection intended to isolate HTML responses may not be applied correctly. An authenticated user...

8.5CVSS7.5AI score0.00259EPSS
SaveExploits0References5Affected Software1
attackerkb
attackerkb
•added 2026/02/04 4:47 p.m.•9 views

CVE-2026-25054

n8n is an open source workflow automation platform. Prior to versions 1.123.9 and 2.2.1, a Cross-Site Scripting XSS vulnerability existed in a markdown rendering component used in n8n's interface, including workflow sticky notes and other areas that support markdown content. An authenticated user...

8.5CVSS5.4AI score0.00216EPSS
SaveExploits0References2Affected Software1
EUVD
EUVD
•added 2026/02/04 4:47 p.m.•19 views

EUVD-2026-5418

n8n is an open source workflow automation platform. Prior to versions 1.123.10 and 2.5.0, vulnerabilities in the Git node allowed authenticated users with permission to create or modify workflows to execute arbitrary system commands or read arbitrary files on the n8n host. This issue has been...

9.9CVSS5.8AI score0.00632EPSS
SaveExploits0References1
OSV
OSV
•added 2026/02/02 9:05 p.m.•18 views

GO-2026-4350 Argo Workflows affected by stored XSS in the artifact directory listing in github.com/argoproj/argo-workflows

Argo Workflows affected by stored XSS in the artifact directory listing in github.com/argoproj/argo-workflows...

7.3CVSS8AI score0.00405EPSS
SaveExploits1References6
Wolfi
Wolfi
•added 2026/01/31 1:48 a.m.•5 views

GHSA-P5WG-G6QR-C7CG vulnerabilities

Vulnerabilities for packages: vitess, prism...

5.8AI score
SaveExploits0
Wolfi
Wolfi
•added 2026/01/31 1:48 a.m.•24 views

CVE-2025-50537 vulnerabilities

Vulnerabilities for packages: vitess, prism...

5.5CVSS5.9AI score0.00196EPSS
SaveExploits1
Chainguard
Chainguard
•added 2026/01/31 1:17 a.m.•23 views

CVE-2025-50537 vulnerabilities

Vulnerabilities for packages: argo-workflows, vitess, arangodb, langfuse-fips, prism, langfuse...

5.5CVSS5.9AI score0.00196EPSS
SaveExploits1
Chainguard
Chainguard
•added 2026/01/31 1:17 a.m.•7 views

GHSA-P5WG-G6QR-C7CG vulnerabilities

Vulnerabilities for packages: argo-workflows, vitess, arangodb, langfuse-fips, prism, langfuse...

5.8AI score
SaveExploits0
OSV
OSV
•added 2026/01/30 4:13 p.m.•27 views

CLEANSTART-2026-QM19832 Moby is an open source container framework developed by Docker Inc

Multiple security vulnerabilities affect the argo-workflows-fips package. Moby is an open source container framework developed by Docker Inc. See references for individual vulnerability details...

9.8CVSS6.4AI score0.00775EPSS
SaveExploits1References22
OSV
OSV
•added 2026/01/30 4:11 p.m.•19 views

CLEANSTART-2026-SO95938 SSH servers parsing GSSAPI authentication requests do not validate the number of mechanisms specified in the request, allowing an attacker to cause unbounded memory consumption

Multiple security vulnerabilities affect the argo-workflows-fips package. SSH servers parsing GSSAPI authentication requests do not validate the number of mechanisms specified in the request, allowing an attacker to cause unbounded memory consumption. See references for individual vulnerability...

9.8CVSS6.5AI score0.00666EPSS
SaveExploits1References15
OSV
OSV
•added 2026/01/30 4:11 p.m.•15 views

CLEANSTART-2026-XR17407 SSH servers parsing GSSAPI authentication requests do not validate the number of mechanisms specified in the request, allowing an attacker to cause unbounded memory consumption

Multiple security vulnerabilities affect the argo-workflows-fips package. SSH servers parsing GSSAPI authentication requests do not validate the number of mechanisms specified in the request, allowing an attacker to cause unbounded memory consumption. See references for individual vulnerability...

9.8CVSS6.5AI score0.00666EPSS
SaveExploits1References20
OSV
OSV
•added 2026/01/30 4:09 p.m.•10 views

CLEANSTART-2026-UZ73015 Cancelling a query (e

Multiple security vulnerabilities affect the argo-workflows-fips package. Cancelling a query e. See references for individual vulnerability details...

9.8CVSS6.5AI score0.00666EPSS
SaveExploits0References7
OSV
OSV
•added 2026/01/30 4:08 p.m.•23 views

CLEANSTART-2026-PK69606 SSH servers parsing GSSAPI authentication requests do not validate the number of mechanisms specified in the request, allowing an attacker to cause unbounded memory consumption

Multiple security vulnerabilities affect the argo-workflows-fips package. SSH servers parsing GSSAPI authentication requests do not validate the number of mechanisms specified in the request, allowing an attacker to cause unbounded memory consumption. See references for individual vulnerability...

9.8CVSS6.5AI score0.00666EPSS
SaveExploits1References17
OSV
OSV
•added 2026/01/30 4:08 p.m.•17 views

CLEANSTART-2026-ZM51114 SSH servers parsing GSSAPI authentication requests do not validate the number of mechanisms specified in the request, allowing an attacker to cause unbounded memory consumption

Multiple security vulnerabilities affect the argo-workflows-fips package. SSH servers parsing GSSAPI authentication requests do not validate the number of mechanisms specified in the request, allowing an attacker to cause unbounded memory consumption. See references for individual vulnerability...

9.8CVSS6.5AI score0.00666EPSS
SaveExploits1References17
OSV
OSV
•added 2026/01/30 4:07 p.m.•23 views

CLEANSTART-2026-PS30901 Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes

Multiple security vulnerabilities affect the argo-workflows-fips package. Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes. See references for individual vulnerability details...

9.8CVSS6.5AI score0.00666EPSS
SaveExploits1References13
OSV
OSV
•added 2026/01/30 4:05 p.m.•18 views

CLEANSTART-2026-WP20592 SSH servers parsing GSSAPI authentication requests do not validate the number of mechanisms specified in the request, allowing an attacker to cause unbounded memory consumption

Multiple security vulnerabilities affect the argo-workflows-fips package. SSH servers parsing GSSAPI authentication requests do not validate the number of mechanisms specified in the request, allowing an attacker to cause unbounded memory consumption. See references for individual vulnerability...

9.8CVSS6.5AI score0.00666EPSS
SaveExploits1References17
OSV
OSV
•added 2026/01/30 4:05 p.m.•13 views

CLEANSTART-2026-WE92783 SSH servers parsing GSSAPI authentication requests do not validate the number of mechanisms specified in the request, allowing an attacker to cause unbounded memory consumption

Multiple security vulnerabilities affect the argo-workflows-fips package. SSH servers parsing GSSAPI authentication requests do not validate the number of mechanisms specified in the request, allowing an attacker to cause unbounded memory consumption. See references for individual vulnerability...

9.8CVSS5.8AI score0.00561EPSS
SaveExploits0References5
OSV
OSV
•added 2026/01/30 4:05 p.m.•16 views

CLEANSTART-2026-WA03785 SSH servers parsing GSSAPI authentication requests do not validate the number of mechanisms specified in the request, allowing an attacker to cause unbounded memory consumption

Multiple security vulnerabilities affect the argo-workflows-fips package. SSH servers parsing GSSAPI authentication requests do not validate the number of mechanisms specified in the request, allowing an attacker to cause unbounded memory consumption. See references for individual vulnerability...

9.8CVSS6.5AI score0.00666EPSS
SaveExploits1References17
Rows per page
Query Builder