n8n before 2.41.4 and 2.42.0 contains an authorization bypass in the agent chat resume endpoint,...
CVE-2026-110841
n8n before 2.41.4 and 2.42.0 contains an authorization bypass in the agent chat resume endpoint, which accepts a run ide
2026-10-15 归档
今日共收录 805 条安全情报，包含 0 个 CVE，398 篇安全通告，以及 100 篇研究论文。
← 返回归档列表n8n before 1.123.83, 2.x before 2.41.4, and 2.42.x before 2.42.1 contains a code execution...
CVE-2026-110845
n8n before 1.123.83, 2.x before 2.41.4, and 2.42.x before 2.42.1 contains a code execution vulnerability in the Git node
n8n before 1.123.83, 2.x before 2.41.4, and 2.42.x before 2.42.1 contains a stored cross-site...
CVE-2026-110847
n8n before 1.123.83, 2.x before 2.41.4, and 2.42.x before 2.42.1 contains a stored cross-site scripting vulnerability in
n8n before 1.123.83, 2.41.4, and 2.42.1 contains a stored cross-site scripting vulnerability in...
CVE-2026-110849
n8n before 1.123.83, 2.41.4, and 2.42.1 contains a stored cross-site scripting vulnerability in the file-preview modal,
n8n before 2.41.4 and 2.42.0 before 2.42.1 does not validate credential ids stored in agent node...
CVE-2026-110850
n8n before 2.41.4 and 2.42.0 before 2.42.1 does not validate credential ids stored in agent node parameters when an edit
n8n before 2.41.4 and 2.42.x before 2.42.1 contains a prototype pollution vulnerability in the...
CVE-2026-110842
n8n before 2.41.4 and 2.42.x before 2.42.1 contains a prototype pollution vulnerability in the MCP workflow-validation t
n8n before 2.41.4 and 2.42.x before 2.42.1 contains an uncontrolled resource consumption...
CVE-2026-110843
n8n before 2.41.4 and 2.42.x before 2.42.1 contains an uncontrolled resource consumption vulnerability in the unauthenti
FreeRDP from 3.0.0-beta1 before 3.32.0 fails to enforce cumulative or absolute size limits when...
CVE-2026-110833
FreeRDP from 3.0.0-beta1 before 3.32.0 fails to enforce cumulative or absolute size limits when reassembling RDPDR chann
FreeRDP 2.0.0 before 3.32.0, when built with WITH_LAME=ON and WITH_DSP_FFMPEG=OFF, has a heap...
CVE-2026-110837
FreeRDP 2.0.0 before 3.32.0, when built with WITH_LAME=ON and WITH_DSP_FFMPEG=OFF, has a heap-based buffer overflow in f
FreeRDP versions 3.13.0 before 3.32.0 contain a resource retention flaw in...
CVE-2026-110831
FreeRDP versions 3.13.0 before 3.32.0 contain a resource retention flaw in drive_process_irp_create, which registers an
FreeRDP from 2.0.0 before 3.32.0 contains a null pointer dereference vulnerability that allows...
CVE-2026-110834
FreeRDP from 2.0.0 before 3.32.0 contains a null pointer dereference vulnerability that allows malicious RDP servers to
n8n before 2.41.4 and 2.42.x before 2.42.1 contains an SQL injection vulnerability in version 1...
CVE-2026-110840
n8n before 2.41.4 and 2.42.x before 2.42.1 contains an SQL injection vulnerability in version 1 of the Microsoft SQL nod
A weakness has been identified in sgl-project SGLang up to 0.5.19. Affected by this vulnerability...
CVE-2026-110807
A weakness has been identified in sgl-project SGLang up to 0.5.19. Affected by this vulnerability is an unknown function
FreeRDP shadow server from 3.0.0 before 3.32.0 dispatches input PDUs during the Confirm Active...
CVE-2026-110838
FreeRDP shadow server from 3.0.0 before 3.32.0 dispatches input PDUs during the Confirm Active state before authenticati
FreeRDP before 3.32.0 fails to close prior serial handles in serial_process_irp_create, allowing...
CVE-2026-110830
FreeRDP before 3.32.0 fails to close prior serial handles in serial_process_irp_create, allowing a malicious RDP server
FreeRDP versions from 3.0.0 before 3.32.0 contain a null pointer dereference in the rdpsnd...
CVE-2026-110829
FreeRDP versions from 3.0.0 before 3.32.0 contain a null pointer dereference in the rdpsnd channel when a fragment sets
FreeRDP 3.0.0 before 3.32.0 allows HTTP header injection in its proxy because a lone LF in the...
CVE-2026-110835
FreeRDP 3.0.0 before 3.32.0 allows HTTP header injection in its proxy because a lone LF in the target portion of a routi
FreeRDP from 2.0.0 before 3.32.0 contains a memory exhaustion vulnerability in...
CVE-2026-110832
FreeRDP from 2.0.0 before 3.32.0 contains a memory exhaustion vulnerability in wts_read_drdynvc_data_first that allows a
FreeRDP 3.3.0 before 3.32.0, when built with WINPR_UTILS_IMAGE_JPEG=ON, has a heap-based out-of...
CVE-2026-110839
FreeRDP 3.3.0 before 3.32.0, when built with WINPR_UTILS_IMAGE_JPEG=ON, has a heap-based out-of-bounds write in winpr_co
Omada Controller's MSP and OpenAPI certificate/private-key management APIs do not properly...
CVE-2026-107795
Omada Controller's MSP and OpenAPI certificate/private-key management APIs do not properly enforce administrative author