#advisory

共收录 22993 条相关情报。

← 返回所有主题

漏洞预警2026-10-28 发布HIGH

n8n before 1.123.85, 2.x before 2.43.5, and 2.44.x before 2.44.1 stores credential secrets in execution error data when operations fail in the Git, MongoDB Atlas Vector Store, a...

CVE-2026-118643

n8n before 1.123.85, 2.x before 2.43.5, and 2.44.x before 2.44.1 stores credential secrets in execution error data when

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-209 #severity:medium

漏洞预警2026-10-28 发布HIGH

n8n before 1.123.85, 2.43.5, and 2.44.1 contains an authorization bypass vulnerability that allows authenticated members to use inaccessible credentials through inline sub-workf...

CVE-2026-118642

n8n before 1.123.85, 2.43.5, and 2.44.1 contains an authorization bypass vulnerability that allows authenticated members

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-863 #severity:medium

漏洞预警2026-10-28 发布MEDIUM

n8n before 1.123.85, 2.43.5, and 2.44.1 contains an authorization bypass vulnerability in Chat Hub that allows chat-only users to register restricted tool types. Users with the ...

CVE-2026-118640

n8n before 1.123.85, 2.43.5, and 2.44.1 contains an authorization bypass vulnerability in Chat Hub that allows chat-only

来源摘录 · NVD / GitHub Advisory

#advisory #cve #cwe-863 #severity:medium

漏洞预警2026-10-28 发布INFO

Echo is a Go web framework. From 4.0.0 until 4.16.1 and 5.4.1, Echo's Proxy middleware selects a raw tunnel from a client WebSocket upgrade request before verifying that the con...

CVE-2026-118264

Echo is a Go web framework. From 4.0.0 until 4.16.1 and 5.4.1, Echo's Proxy middleware selects a raw tunnel from a clien

来源摘录 · NVD / OSV.dev

#advisory #cve #cwe-444 #cwe-863

漏洞预警2026-10-28 发布INFO

Echo is a Go web framework. From 4.0.0 until 4.16.1, Echo v4's opt-in BodyDump middleware reads complete request bodies into memory before handlers run and retains complete resp...

CVE-2026-118260

Echo is a Go web framework. From 4.0.0 until 4.16.1, Echo v4's opt-in BodyDump middleware reads complete request bodies

来源摘录 · NVD / OSV.dev

#advisory #cve #cwe-400 #cwe-770

漏洞预警2026-10-28 发布INFO

Highcharts JS is a JavaScript charting library based on SVG. From 2.0.0 until 3.2.0, Highcharts Grid applies credits.href to the credits link without validating the URL scheme. ...

CVE-2026-118255

Highcharts JS is a JavaScript charting library based on SVG. From 2.0.0 until 3.2.0, Highcharts Grid applies credits.hre

来源摘录 · NVD / OSV.dev

#advisory #cve #cwe-79

漏洞预警2026-10-28 发布INFO

Highcharts JS is a JavaScript charting library based on SVG. From 2.0.0 until 3.2.0, Highcharts Grid writes pagination language strings into the DOM as markup instead of text. A...

CVE-2026-118254

Highcharts JS is a JavaScript charting library based on SVG. From 2.0.0 until 3.2.0, Highcharts Grid writes pagination l

来源摘录 · NVD / OSV.dev

#advisory #cve #cwe-79

漏洞预警2026-10-28 发布INFO

Highcharts JS is a JavaScript charting library based on SVG. From 1.0.0 until 4.2.3, Highcharts Dashboards edit-mode sidebar parses component language strings as HTML rather tha...

CVE-2026-118252

Highcharts JS is a JavaScript charting library based on SVG. From 1.0.0 until 4.2.3, Highcharts Dashboards edit-mode sid

来源摘录 · NVD / OSV.dev

#advisory #cve #cwe-79

漏洞预警2026-10-28 发布INFO

Highcharts JS is a JavaScript charting library based on SVG. Prior to 11.4.9, 12.6.1, and 13.1.0, Highcharts assigns credits.href to the window location when the credits label i...

CVE-2026-118251

Highcharts JS is a JavaScript charting library based on SVG. Prior to 11.4.9, 12.6.1, and 13.1.0, Highcharts assigns cre

来源摘录 · NVD / OSV.dev

#advisory #cve #cwe-79

漏洞预警2026-10-28 发布MEDIUM

Insufficient policy enforcement in chrome-devtools-mcp in Google Chrome on Linux prior to 1.5.0 allowed a local attacker to perform arbitrary read/write via a malicious file. (C...

CVE-2026-106484

Insufficient policy enforcement in chrome-devtools-mcp in Google Chrome on Linux prior to 1.5.0 allowed a local attacker

来源摘录 · NVD / OSV.dev / GitHub Advisory

#advisory #cve #cwe-284 #severity:medium

漏洞预警2026-10-28 发布INFO

Highcharts JS is a JavaScript charting library based on SVG. From 6.1.0 until 11.4.9, 12.6.1, and 3.1.0, Highcharts follows dot-separated series.keys paths without filtering eac...

CVE-2026-118250

Highcharts JS is a JavaScript charting library based on SVG. From 6.1.0 until 11.4.9, 12.6.1, and 3.1.0, Highcharts foll

来源摘录 · NVD / OSV.dev

#advisory #cve #cwe-1321

漏洞预警2026-10-28 发布INFO

Highcharts JS is a JavaScript charting library based on SVG. From 1.0.0 until 4.2.2, Highcharts Dashboards edit mode walks editableOptions propertyPath segments without rejectin...

CVE-2026-118248

Highcharts JS is a JavaScript charting library based on SVG. From 1.0.0 until 4.2.2, Highcharts Dashboards edit mode wal

来源摘录 · NVD / OSV.dev

#advisory #cve #cwe-1321

漏洞预警2026-10-28 发布INFO

Highcharts JS is a JavaScript charting library based on SVG. From 1.0.0 until Dashboards 4.2.2, and from 2.0.0 until Grid Pro 3.2.0, Highcharts DataTable single-cell writers use...

CVE-2026-118247

Highcharts JS is a JavaScript charting library based on SVG. From 1.0.0 until Dashboards 4.2.2, and from 2.0.0 until Gri

来源摘录 · NVD / OSV.dev

#advisory #cve #cwe-1321

漏洞预警2026-10-28 发布INFO

Highcharts JS is a JavaScript charting library based on SVG. From 10.0.0 until 11.4.9, 12.6.1, and 13.1.0, Highcharts applies breadcrumbs.style as SVG attributes rather than CSS...

CVE-2026-118246

Highcharts JS is a JavaScript charting library based on SVG. From 10.0.0 until 11.4.9, 12.6.1, and 13.1.0, Highcharts ap

来源摘录 · NVD / OSV.dev

#advisory #cve #cwe-79

漏洞预警2026-10-28 发布INFO

Highcharts JS is a JavaScript charting library based on SVG. From 12.0.0 until 12.6.1 and 13.1.0, Highcharts falls back to assigning raw markup to innerHTML when DOMParser canno...

CVE-2026-118244

Highcharts JS is a JavaScript charting library based on SVG. From 12.0.0 until 12.6.1 and 13.1.0, Highcharts falls back

来源摘录 · NVD / OSV.dev

#advisory #cve #cwe-79

漏洞预警2026-10-28 发布INFO

Highcharts JS is a JavaScript charting library based on SVG. From 1.0.0 until 4.2.2, Highcharts Dashboards stores DataCursor listener and state maps in plain objects keyed by Da...

CVE-2026-118243

Highcharts JS is a JavaScript charting library based on SVG. From 1.0.0 until 4.2.2, Highcharts Dashboards stores DataCu

来源摘录 · NVD / OSV.dev

#advisory #cve #cwe-1321

漏洞预警2026-10-28 发布INFO

Highcharts JS is a JavaScript charting library based on SVG. From 2.3.0 until 3.2.0, Highcharts Grid creates SVG path elements from rendering.icons object definitions and previo...

CVE-2026-118242

Highcharts JS is a JavaScript charting library based on SVG. From 2.3.0 until 3.2.0, Highcharts Grid creates SVG path el

来源摘录 · NVD / OSV.dev

#advisory #cve #cwe-79

漏洞预警2026-10-28 发布INFO

HTTP::Body versions before 1.24_01 for Perl allow memory exhaustion via unbounded buffering of chunked request bodies. In chunked mode, used when no content length is given, ad...

CVE-2026-117501

HTTP::Body versions before 1.24_01 for Perl allow memory exhaustion via unbounded buffering of chunked request bodies.

来源摘录 · NVD / OSV.dev

#advisory #cve #cwe-770

漏洞预警2026-10-28 发布INFO

HTTP::Body versions before 1.24_01 for Perl allow CPU exhaustion via regex backtracking on the filename of a multipart upload. For every file part, the multipart parser finds t...

CVE-2026-117500

HTTP::Body versions before 1.24_01 for Perl allow CPU exhaustion via regex backtracking on the filename of a multipart u

来源摘录 · NVD / OSV.dev

#advisory #cve #cwe-1333

漏洞预警2026-10-28 发布INFO

Highcharts JS is a JavaScript charting library based on SVG. From 2.0.0 until 3.2.0, Highcharts Grid Pro input renderers copy the cells.renderer.attributes and cells.editMode.re...

CVE-2026-116797

Highcharts JS is a JavaScript charting library based on SVG. From 2.0.0 until 3.2.0, Highcharts Grid Pro input renderers

来源摘录 · NVD / OSV.dev

#advisory #cve #cwe-79