n8n: MySQL v1 Node executeQuery Operation Allows SQL Injection via Unparameterized Expression Interpolation
CVE-2026-59257
## Impact The legacy MySQL v1 node's `executeQuery` operation substitutes evaluated `{{ ... }}` expression values direct
2026-07-23 归档
今日共收录 1422 条安全情报，包含 546 个 CVE，469 篇安全通告，以及 113 篇研究论文。
← 返回归档列表n8n: External Secrets Permission Bypass via Expression Parser Mismatch
CVE-2026-59259
## Impact Due to a mismatch between the static validation check and the runtime expression engine, an authenticated user
n8n: Legacy Expression Evaluator Sanitizer Bypass Leads to Authenticated Code Execution
CVE-2026-65591
## Impact The legacy expression evaluator's computed-member sanitizer can be bypassed by an authenticated user with work
n8n: "Allowed HTTP Request Domains" Restriction Bypass via AI Agents MCP Connector
CVE-2026-59207
## Impact The AI Agents feature did not enforce the "Allowed HTTP Request Domains" restriction configured on credentials
n8n: Prototype Pollution via Workflow Credentials Leads to Unauthenticated User and Project Enumeration
CVE-2026-59206
## Impact An authenticated user with the default `workflow:create` permission could pollute `Object.prototype` through a
n8n: Shared Credential Header Leak via HTTP Request Pagination Expression
CVE-2026-59209
## Impact An authenticated member with use-only editor access to a shared workflow could read credential-populated heade
Netty: CRLF Injection via Multipart Filename in Netty HttpPostRequestEncoder
CVE-2026-59921
# Security Vulnerability Report: CRLF Injection via Multipart Filename in Netty HttpPostRequestEncoder ## 1. Vulnerabil
Netty: STOMP CONNECT Frame Header Injection in Netty
CVE-2026-59920
# Security Vulnerability Report: STOMP CONNECT Frame Header Injection in Netty ## 1. Vulnerability Summary | Field | V
Netty: HAProxy V1 Protocol CRLF Injection via AF_UNIX Address
CVE-2026-59919
# Security Vulnerability Report: HAProxy V1 Protocol CRLF Injection via AF_UNIX Address in Netty ## 1. Vulnerability Su
Netty: [codec-http2] Lack of Host Header Deduplication in HTTP/2→HTTP/1.x Translation Leads to Request Routing Bypass
CVE-2026-59900
Netty's HTTP/2-to-HTTP/1.x translation layer (`Http2StreamFrameToHttpObjectCodec` and `InboundHttp2ToHttpAdapter`) fails
Netty: WebSockets V07/V08 handshaker missing Connection/Upgrade validation
CVE-2026-59898
## Summary An attacker can force WebSocket upgrade via the lax V07 (or V08) handshaker by sending `Sec-WebSocket-Version
Netty XML: Injection / Risky Sink — unconfigured XML factory with active DTD and entity handling
CVE-2026-56817
Any caller that can deliver bytes to a Netty channel pipeline containing `XmlDecoder` can send XML with a DOCTYPE declar
Netty: Memory Exhaustion via HTTP/3 Reserved Frame Types
CVE-2026-56816
### Summary Netty's Http3FrameCodec buffers incoming data for HTTP/3 reserved frame types up to the specified payload le
Netty: Security Control Bypass via CORS Short-Circuit Failure
CVE-2026-56746
### Summary Netty's CorsHandler provides a `shortCircuit()` configuration designed to reject unauthorized cross-origin r
Netty: [SpdyHttpDecoder] ByteBuf Reference Leak on RST_STREAM Leads to Native Memory Exhaustion
CVE-2026-56745
The `SpdyHttpDecoder` handler in Netty's SPDY-to-HTTP codec allocates a pooled `ByteBuf` when processing a client-initia
User tags, filters and conditions allowed access to insufficiently restricted user fields....
CVE-2026-64794
User tags, filters and conditions allowed access to insufficiently restricted user fields. Crafted content could expose
Free did not require both the article creator and last modifier to be Super Users before...
CVE-2026-64796
Free did not require both the article creator and last modifier to be Super Users before executing article PHP. Pro did
Persistent URL login keys were also generated using a non-cryptographic random generator with...
CVE-2026-64798
Persistent URL login keys were also generated using a non-cryptographic random generator with insufficient entropy.
IP Login trusted forwarded client-IP headers without requiring a configured trusted proxy....
CVE-2026-64797
IP Login trusted forwarded client-IP headers without requiring a configured trusted proxy. Attackers could spoof the IP
Privileged Regular Labs AJAX endpoints did not consistently require valid CSRF tokens, matching...
CVE-2026-63265
Privileged Regular Labs AJAX endpoints did not consistently require valid CSRF tokens, matching component/item permissio