GitPython before 3.2.0 contains a remote code execution vulnerability that allows attackers to...
CVE-2026-110857
GitPython before 3.2.0 contains a remote code execution vulnerability that allows attackers to run commands because Git.
#advisory
共收录 23002 条相关情报。
← 返回所有主题n8n before 1.123.83, 2.x before 2.41.4, and 2.42.x before 2.42.1 contains an authentication...
CVE-2026-110852
n8n before 1.123.83, 2.x before 2.41.4, and 2.42.x before 2.42.1 contains an authentication bypass because dynamic-path
Parse Server before 8.6.97 and 9.0.0 before 9.10.2-alpha.6 does not handle errors raised while...
CVE-2026-110854
Parse Server before 8.6.97 and 9.0.0 before 9.10.2-alpha.6 does not handle errors raised while sending verification or p
GitPython before 3.2.0 contains a regular expression denial of service vulnerability in the...
CVE-2026-110856
GitPython before 3.2.0 contains a regular expression denial of service vulnerability in the _re_actor_epoch pattern used
GitPython before 3.2.0 contains an information disclosure vulnerability that allows malicious...
CVE-2026-110855
GitPython before 3.2.0 contains an information disclosure vulnerability that allows malicious repositories to expand env
GitPython from 3.1.62 before 3.2.0 contains a symlink-following flaw in Submodule.move(), which...
CVE-2026-110860
GitPython from 3.1.62 before 3.2.0 contains a symlink-following flaw in Submodule.move(), which checks the destination o
n8n before 2.41.4 and 2.42.x before 2.42.1 contains a signature bypass in the waiting-webhook...
CVE-2026-110846
n8n before 2.41.4 and 2.42.x before 2.42.1 contains a signature bypass in the waiting-webhook endpoint, which selects Se
n8n before 1.123.83 contains an authorization bypass vulnerability that allows shared-workflow...
CVE-2026-110844
n8n before 1.123.83 contains an authorization bypass vulnerability that allows shared-workflow editors to use credential
n8n before 1.123.83, 2.x before 2.41.4, and 2.42.x before 2.42.1 contains a prototype pollution...
CVE-2026-110848
n8n before 1.123.83, 2.x before 2.41.4, and 2.42.x before 2.42.1 contains a prototype pollution vulnerability in the AI
n8n before 2.41.4 and 2.42.0 contains an authorization bypass in the agent chat resume endpoint,...
CVE-2026-110841
n8n before 2.41.4 and 2.42.0 contains an authorization bypass in the agent chat resume endpoint, which accepts a run ide
n8n before 1.123.83, 2.x before 2.41.4, and 2.42.x before 2.42.1 contains a code execution...
CVE-2026-110845
n8n before 1.123.83, 2.x before 2.41.4, and 2.42.x before 2.42.1 contains a code execution vulnerability in the Git node
n8n before 1.123.83, 2.x before 2.41.4, and 2.42.x before 2.42.1 contains a stored cross-site...
CVE-2026-110847
n8n before 1.123.83, 2.x before 2.41.4, and 2.42.x before 2.42.1 contains a stored cross-site scripting vulnerability in
n8n before 1.123.83, 2.41.4, and 2.42.1 contains a stored cross-site scripting vulnerability in...
CVE-2026-110849
n8n before 1.123.83, 2.41.4, and 2.42.1 contains a stored cross-site scripting vulnerability in the file-preview modal,
n8n before 2.41.4 and 2.42.0 before 2.42.1 does not validate credential ids stored in agent node...
CVE-2026-110850
n8n before 2.41.4 and 2.42.0 before 2.42.1 does not validate credential ids stored in agent node parameters when an edit
n8n before 2.41.4 and 2.42.x before 2.42.1 contains a prototype pollution vulnerability in the...
CVE-2026-110842
n8n before 2.41.4 and 2.42.x before 2.42.1 contains a prototype pollution vulnerability in the MCP workflow-validation t
n8n before 2.41.4 and 2.42.x before 2.42.1 contains an uncontrolled resource consumption...
CVE-2026-110843
n8n before 2.41.4 and 2.42.x before 2.42.1 contains an uncontrolled resource consumption vulnerability in the unauthenti
FreeRDP from 3.0.0 before 3.32.0 contains an infinite loop vulnerability in http_response_recv()...
CVE-2026-110836
FreeRDP from 3.0.0 before 3.32.0 contains an infinite loop vulnerability in http_response_recv() that allows malicious g
FreeRDP from 3.0.0-beta1 before 3.32.0 fails to enforce cumulative or absolute size limits when...
CVE-2026-110833
FreeRDP from 3.0.0-beta1 before 3.32.0 fails to enforce cumulative or absolute size limits when reassembling RDPDR chann
FreeRDP 2.0.0 before 3.32.0, when built with WITH_LAME=ON and WITH_DSP_FFMPEG=OFF, has a heap...
CVE-2026-110837
FreeRDP 2.0.0 before 3.32.0, when built with WITH_LAME=ON and WITH_DSP_FFMPEG=OFF, has a heap-based buffer overflow in f
FreeRDP versions 3.13.0 before 3.32.0 contain a resource retention flaw in...
CVE-2026-110831
FreeRDP versions 3.13.0 before 3.32.0 contain a resource retention flaw in drive_process_irp_create, which registers an