10883 matches found
CLEANSTART-2026-RL65509 vm2 is a sandbox for running untrusted Node
Security vulnerability affects the n8n package. vm2 is a sandbox for running untrusted Node...
CLEANSTART-2026-WY20719 vm2 versions 3
Security vulnerability affects the n8n package. vm2 versions 3...
CLEANSTART-2026-IT25891 vm2 is a sandbox library for running untrusted JavaScript in Node
Security vulnerability affects the n8n package. vm2 is a sandbox library for running untrusted JavaScript in Node...
CLEANSTART-2026-VO63729 vm2 through 3
Security vulnerability affects the n8n package. vm2 through 3...
CLEANSTART-2026-QS01923 vm2 before 3
Security vulnerability affects the n8n package. vm2 before 3...
CLEANSTART-2026-UG74776 simple-git, an interface for running git commands in any node
Security vulnerability affects the n8n package. simple-git, an interface for running git commands in any node...
CLEANSTART-2026-ZC70101 vm2 before 3
Security vulnerability affects the n8n package. vm2 before 3...
CLEANSTART-2026-MT76481 Axios is a promise-based HTTP client for the browser and Node
Security vulnerability affects the n8n package. Axios is a promise-based HTTP client for the browser and Node...
CLEANSTART-2026-MR56986 simple-git, an interface for running git commands in any node
Security vulnerability affects the n8n package. simple-git, an interface for running git commands in any node...
CLEANSTART-2026-SU19502 vm2 before 3
Security vulnerability affects the n8n package. vm2 before 3...
CLEANSTART-2026-UO50229 vm2 3
Security vulnerability affects the n8n package. vm2 3...
CLEANSTART-2026-DN17420 vm2 before 3
Security vulnerability affects the n8n package. vm2 before 3...
CLEANSTART-2026-CN31177 vm2 before 3
Security vulnerability affects the n8n package. vm2 before 3...
CLEANSTART-2026-NR22907 vm2 versions from 3
Security vulnerability affects the n8n package. vm2 versions from 3...
CLEANSTART-2026-JW87371 vm2 versions 3
Security vulnerability affects the n8n package. vm2 versions 3...
CLEANSTART-2026-BS07911 vm2 versions from 3
Security vulnerability affects the n8n package. vm2 versions from 3...
CLEANSTART-2026-HG84830 vm2 versions >= 3
Security vulnerability affects the n8n package. vm2 versions = 3...
CLEANSTART-2026-SJ12974 vm2 versions 3
Security vulnerability affects the n8n package. vm2 versions 3...
CLEANSTART-2026-AL98227 vm2 3
Security vulnerability affects the n8n package. vm2 3...
CLEANSTART-2026-XK86217 vm2 before 3
Security vulnerability affects the n8n package. vm2 before 3...
CLEANSTART-2026-PF22063 PyJWT is a Python implementation of JSON Web Token standards
CVE-2026-102265 affects multiple packages. PyJWT is a Python implementation of JSON Web Token standards. See references for individual vulnerability details...
CLEANSTART-2026-YX87387 PyJWT is a Python implementation of JSON Web Token standards
CVE-2026-102274 affects multiple packages. PyJWT is a Python implementation of JSON Web Token standards. See references for individual vulnerability details...
CLEANSTART-2026-AF59744 PyJWT is a Python implementation of JSON Web Token standards
CVE-2026-103001 affects multiple packages. PyJWT is a Python implementation of JSON Web Token standards. See references for individual vulnerability details...
CLEANSTART-2026-GJ26931 PyJWT is a Python implementation of JSON Web Token standards
CVE-2026-102272 affects multiple packages. PyJWT is a Python implementation of JSON Web Token standards. See references for individual vulnerability details...
CLEANSTART-2026-VH40017 PyJWT is a Python implementation of JSON Web Token standards
CVE-2026-101918 affects multiple packages. PyJWT is a Python implementation of JSON Web Token standards. See references for individual vulnerability details...
CLEANSTART-2026-FP98505 PyJWT is a Python implementation of JSON Web Token standards
CVE-2026-102273 affects multiple packages. PyJWT is a Python implementation of JSON Web Token standards. See references for individual vulnerability details...
CLEANSTART-2026-UK80240 PyJWT is a Python implementation of JSON Web Token standards
CVE-2026-101917 affects multiple packages. PyJWT is a Python implementation of JSON Web Token standards. See references for individual vulnerability details...
CLEANSTART-2026-JF42627 PyJWT is a Python implementation of JSON Web Token standards
CVE-2026-102270 affects multiple packages. PyJWT is a Python implementation of JSON Web Token standards. See references for individual vulnerability details...
CLEANSTART-2026-GM98203 PyJWT is a Python implementation of JSON Web Token standards
CVE-2026-102267 affects multiple packages. PyJWT is a Python implementation of JSON Web Token standards. See references for individual vulnerability details...
CLEANSTART-2026-XO84437 PyJWT is a Python implementation of JSON Web Token standards
CVE-2026-102271 affects multiple packages. PyJWT is a Python implementation of JSON Web Token standards. See references for individual vulnerability details...
CLEANSTART-2026-DL13850 PyJWT is a Python implementation of JSON Web Token standards
CVE-2026-102269 affects multiple packages. PyJWT is a Python implementation of JSON Web Token standards. See references for individual vulnerability details...
CLEANSTART-2026-UQ32467 Apache Airflow wrote Variable values and Connection `extra` contents to the audit log in cleartext when they were submitted through the bulk endpoints (`PATCH /api/v2/variables` and `PATCH /api/v2/...
Security vulnerability affects the airflow-3 package. Apache Airflow wrote Variable values and Connection extra contents to the audit log in cleartext when they were submitted through the bulk endpoints PATCH /api/v2/variables and PATCH /api/v2/connections...
CLEANSTART-2026-UV14417 Apache Airflow's Task SDK did not mask the contents of a Variable whose JSON value is a list, so secrets stored in that shape appeared in cleartext in task logs and in the Rendered Templates UI
Security vulnerability affects the airflow-3 package. Apache Airflow's Task SDK did not mask the contents of a Variable whose JSON value is a list, so secrets stored in that shape appeared in cleartext in task logs and in the Rendered Templates UI...
CLEANSTART-2026-CG47796 Apache Airflow's secrets masker did not mask `var
Security vulnerability affects the airflow-3 package. Apache Airflow's secrets masker did not mask var...
CLEANSTART-2026-SG17271 Before apache-airflow 3
Security vulnerability affects the airflow-3 package. Before apache-airflow 3...
CLEANSTART-2026-XF88803 PyJWT is a Python implementation of JSON Web Token standards
CVE-2026-102266 affects multiple packages. PyJWT is a Python implementation of JSON Web Token standards. See references for individual vulnerability details...
CLEANSTART-2026-NO84858 Security fix for CVE-2026-49265 applied in: airflow-3 3.1.8-r13, airflow-3 3.2.1-r11, airflow-3 3.0.6-r9, airflow-3 3.2.2-r8
CVE-2026-49265 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-WB32987 denial-of-service (DoS) vulnerability exists in google
CVE-2026-0994 affects multiple packages. A denial-of-service DoS vulnerability exists in google. See references for individual vulnerability details...
CLEANSTART-2026-ER50683 fsspec is a specification and Python implementation framework for filesystem interfaces
CVE-2026-104851 affects multiple packages. fsspec is a specification and Python implementation framework for filesystem interfaces. See references for individual vulnerability details...
CLEANSTART-2026-SQ68931 In Apache Airflow before 3
Security vulnerability affects the airflow-3 package. In Apache Airflow before 3...
CLEANSTART-2026-QX32909 PyJWT is a Python implementation of JSON Web Token standards
CVE-2026-102275 affects multiple packages. PyJWT is a Python implementation of JSON Web Token standards. See references for individual vulnerability details...
CLEANSTART-2026-UF47691 Security fix for CVE-2026-49264 applied in: airflow-3 3.1.8-r13, airflow-3 3.2.1-r11, airflow-3 3.0.6-r9, airflow-3 3.2.2-r8
CVE-2026-49264 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-UI77772 Apache Airflow's asset materialization endpoint (`POST /api/v2/assets/{asset_id}/materialize`) and the XCom result check on `wait_dag_run_until_finished` authorized the target Dag without its team,...
Security vulnerability affects the airflow-3 package. Apache Airflow's asset materialization endpoint POST /api/v2/assets/assetid/materialize and the XCom result check on waitdagrununtilfinished authorized the target Dag without its team, unlike every other authorization site...
CLEANSTART-2026-YA90278 Multidict is an implementation of a multidict data structure
CVE-2026-104874 affects multiple packages. Multidict is an implementation of a multidict data structure. See references for individual vulnerability details...
CLEANSTART-2026-CM94028 Apache Airflow's `/assets/events` API returned asset events for every Dag in the deployment, with no filter restricting them to the Dags the caller is authorized to read
Security vulnerability affects the airflow-3 package. Apache Airflow's /assets/events API returned asset events for every Dag in the deployment, with no filter restricting them to the Dags the caller is authorized to read...
CLEANSTART-2026-ZO32580 Apache Airflow's XCom `GET /api/v2/{
Security vulnerability affects the airflow-3 package. Apache Airflow's XCom GET /api/v2/...
CLEANSTART-2026-QJ23828 Apache Airflow: the Core API logout endpoint revokes only a session token presented as the _token cookie
Security vulnerability affects the airflow-3 package. Apache Airflow: the Core API logout endpoint revokes only a session token presented as the token cookie...
CLEANSTART-2026-TQ39648 Bulk Variables API in Apache Airflow called the redactor without passing the variable's key, so the key-based `should_hide_value_for_key` check (which triggers on secret-suffixed key names like `*_...
Security vulnerability affects the airflow-3 package. The Bulk Variables API in Apache Airflow called the redactor without passing the variable's key, so the key-based shouldhidevalueforkey check which triggers on secret-suffixed key names like password / token / secret could not fire for...
CLEANSTART-2026-OM50067 Apache Airflow's Backfill API authorized a request against a Dag id supplied by the caller whenever the `backfill_id` path segment failed to parse
Security vulnerability affects the airflow-3 package. Apache Airflow's Backfill API authorized a request against a Dag id supplied by the caller whenever the backfillid path segment failed to parse...