Lucene search
K

1063 matches found

OSV
OSV
added 2026/02/06 12:39 a.m.2 views

CLEANSTART-2026-BZ58799 Within HostnameError

Multiple security vulnerabilities affect the argo-workflows package. Within HostnameError. See references for individual vulnerability details...

9.8CVSS5.5AI score0.00451EPSS
Exploits2References6
HackRead
HackRead
added 2026/02/05 3:6 p.m.4 views

Godent Rolls Out Scanner-as-a-Service Model to Drive Digital Transformation in European Dentistry

Godent has announced the launch of its scanner-as-a-service program for European DSOs, combining free intraoral scanners with a fully integrated digital lab infrastructure to modernize dental workflows...

5.4AI score
Exploits0
Github Security Blog
Github Security Blog
added 2026/02/04 6:15 p.m.7 views

n8n's Improper CSP Enforcement in Webhook Responses May Allow Stored XSS

Impact A Cross-site Scripting XSS vulnerability has been identified in the handling of webhook responses and related HTTP endpoints. Under certain conditions, the Content Security Policy CSP sandbox protection intended to isolate HTML responses may not be applied correctly. An authenticated user...

8.5CVSS5.5AI score0.00224EPSS
Exploits0References5Affected Software1
Snyk
Snyk
added 2026/02/04 6:15 p.m.9 views

Cross-site Scripting (XSS)

Overview n8n-core is a Core functionality of n8n Affected versions of this package are vulnerable to Cross-site Scripting XSS due to improper enforcement of Content Security Policy in webhook response handling. An attacker can execute unauthorized scripts with same-origin privileges by crafting...

8.7CVSS5.3AI score0.00224EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2026/02/04 4:47 p.m.3 views

CVE-2026-25054

n8n is an open source workflow automation platform. Prior to versions 1.123.9 and 2.2.1, a Cross-Site Scripting XSS vulnerability existed in a markdown rendering component used in n8n's interface, including workflow sticky notes and other areas that support markdown content. An authenticated user...

8.5CVSS5.4AI score0.00187EPSS
Exploits0References2Affected Software1
EUVD
EUVD
added 2026/02/04 4:47 p.m.3 views

EUVD-2026-5418

n8n is an open source workflow automation platform. Prior to versions 1.123.10 and 2.5.0, vulnerabilities in the Git node allowed authenticated users with permission to create or modify workflows to execute arbitrary system commands or read arbitrary files on the n8n host. This issue has been...

9.9CVSS5.8AI score0.00568EPSS
Exploits0References1
OSV
OSV
added 2026/02/02 9:5 p.m.2 views

GO-2026-4350 Argo Workflows affected by stored XSS in the artifact directory listing in github.com/argoproj/argo-workflows

Argo Workflows affected by stored XSS in the artifact directory listing in github.com/argoproj/argo-workflows...

7.3CVSS5.2AI score0.00245EPSS
Exploits1References6
Wolfi
Wolfi
added 2026/01/31 1:48 a.m.2 views

GHSA-P5WG-G6QR-C7CG vulnerabilities

Vulnerabilities for packages: vitess, argo-workflows, prism...

5.2AI score
Exploits0
Wolfi
Wolfi
added 2026/01/31 1:48 a.m.9 views

CVE-2025-50537 vulnerabilities

Vulnerabilities for packages: vitess, argo-workflows, prism...

5.5CVSS5.1AI score0.00149EPSS
Exploits1
Chainguard
Chainguard
added 2026/01/31 1:17 a.m.2 views

GHSA-P5WG-G6QR-C7CG vulnerabilities

Vulnerabilities for packages: arangodb, prism, argo-workflows, langfuse, vitess, langfuse-fips...

5.2AI score
Exploits0
Chainguard
Chainguard
added 2026/01/31 1:17 a.m.8 views

CVE-2025-50537 vulnerabilities

Vulnerabilities for packages: arangodb, prism, argo-workflows, langfuse, vitess, langfuse-fips...

5.5CVSS5.1AI score0.00149EPSS
Exploits1
OSV
OSV
added 2026/01/30 4:13 p.m.4 views

CLEANSTART-2026-QM19832 Moby is an open source container framework developed by Docker Inc

Multiple security vulnerabilities affect the argo-workflows-fips package. Moby is an open source container framework developed by Docker Inc. See references for individual vulnerability details...

9.8CVSS5.8AI score0.00671EPSS
Exploits1References22
OSV
OSV
added 2026/01/30 4:11 p.m.3 views

CLEANSTART-2026-XR17407 SSH servers parsing GSSAPI authentication requests do not validate the number of mechanisms specified in the request, allowing an attacker to cause unbounded memory consumption

Multiple security vulnerabilities affect the argo-workflows-fips package. SSH servers parsing GSSAPI authentication requests do not validate the number of mechanisms specified in the request, allowing an attacker to cause unbounded memory consumption. See references for individual vulnerability...

9.8CVSS5.7AI score0.0056EPSS
Exploits1References20
OSV
OSV
added 2026/01/30 4:11 p.m.1 views

CLEANSTART-2026-SO95938 SSH servers parsing GSSAPI authentication requests do not validate the number of mechanisms specified in the request, allowing an attacker to cause unbounded memory consumption

Multiple security vulnerabilities affect the argo-workflows-fips package. SSH servers parsing GSSAPI authentication requests do not validate the number of mechanisms specified in the request, allowing an attacker to cause unbounded memory consumption. See references for individual vulnerability...

9.8CVSS5.8AI score0.0056EPSS
Exploits1References15
OSV
OSV
added 2026/01/30 4:9 p.m.2 views

CLEANSTART-2026-UZ73015 Cancelling a query (e

Multiple security vulnerabilities affect the argo-workflows-fips package. Cancelling a query e. See references for individual vulnerability details...

9.8CVSS5.5AI score0.0056EPSS
Exploits0References7
OSV
OSV
added 2026/01/30 4:8 p.m.2 views

CLEANSTART-2026-PK69606 SSH servers parsing GSSAPI authentication requests do not validate the number of mechanisms specified in the request, allowing an attacker to cause unbounded memory consumption

Multiple security vulnerabilities affect the argo-workflows-fips package. SSH servers parsing GSSAPI authentication requests do not validate the number of mechanisms specified in the request, allowing an attacker to cause unbounded memory consumption. See references for individual vulnerability...

9.8CVSS7.1AI score0.0056EPSS
Exploits1References17
OSV
OSV
added 2026/01/30 4:8 p.m.8 views

CLEANSTART-2026-ZM51114 SSH servers parsing GSSAPI authentication requests do not validate the number of mechanisms specified in the request, allowing an attacker to cause unbounded memory consumption

Multiple security vulnerabilities affect the argo-workflows-fips package. SSH servers parsing GSSAPI authentication requests do not validate the number of mechanisms specified in the request, allowing an attacker to cause unbounded memory consumption. See references for individual vulnerability...

9.8CVSS5.8AI score0.0056EPSS
Exploits1References17
OSV
OSV
added 2026/01/30 4:7 p.m.7 views

CLEANSTART-2026-PS30901 Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes

Multiple security vulnerabilities affect the argo-workflows-fips package. Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes. See references for individual vulnerability details...

9.8CVSS5.8AI score0.0056EPSS
Exploits1References13
OSV
OSV
added 2026/01/30 4:5 p.m.3 views

CLEANSTART-2026-WP20592 SSH servers parsing GSSAPI authentication requests do not validate the number of mechanisms specified in the request, allowing an attacker to cause unbounded memory consumption

Multiple security vulnerabilities affect the argo-workflows-fips package. SSH servers parsing GSSAPI authentication requests do not validate the number of mechanisms specified in the request, allowing an attacker to cause unbounded memory consumption. See references for individual vulnerability...

9.8CVSS5.8AI score0.0056EPSS
Exploits1References17
OSV
OSV
added 2026/01/30 4:5 p.m.2 views

CLEANSTART-2026-WE92783 SSH servers parsing GSSAPI authentication requests do not validate the number of mechanisms specified in the request, allowing an attacker to cause unbounded memory consumption

Multiple security vulnerabilities affect the argo-workflows-fips package. SSH servers parsing GSSAPI authentication requests do not validate the number of mechanisms specified in the request, allowing an attacker to cause unbounded memory consumption. See references for individual vulnerability...

9.8CVSS5.8AI score0.00512EPSS
Exploits0References5
Rows per page
Query Builder