Multer vulnerable to Denial of Service via deeply nested field names

CVE-2026-5079

### Impact Multer is vulnerable to a Denial of Service (DoS) via deeply nested field names in multipart form data. The

历史摘要 · 未重新核验 · GitHub Advisory

Multer vulnerable to Denial of Service via incomplete cleanup of aborted uploads

CVE-2026-5038

### Impact A vulnerability in Multer allows an attacker to trigger a Denial of Service (DoS) by aborting or sending mal

历史摘要 · 未重新核验 · GitHub Advisory

Claude Code: Out-of-Band Data Exfiltration via Pre-Approved HuggingFace Domain in WebFetch

CVE-2026-54316

Because the hostname huggingface.co was pre-approved as a bare hostname for the WebFetch tool, any path on that domain—i

历史摘要 · 未重新核验 · GitHub Advisory

OpenClaw: MCP Streamable HTTP redirects could forward configured custom headers to another origin

CVE-2026-53840

### Summary OpenClaw supports remote MCP Streamable HTTP servers with operator-configured custom headers. In affected r

历史摘要 · 未重新核验 · GitHub Advisory

Pi Agent: Potential XSS in HTML session exports via Markdown URL sanitization bypass

CVE-2026-54326

# Potential XSS in HTML session exports via Markdown URL handling Pi HTML exports render session Markdown into a static

历史摘要 · 未重新核验 · GitHub Advisory

@nuxt/webpack-builder and @nuxt/rspack-builder dev server same-origin check bypassed when Sec-Fetch-Site, Origin, and Referer are all absent (incomplete fix for GHSA-6m52-m754-p...

CVE-2026-49993

### Summary This is an incomplete fix for [GHSA-6m52-m754-pw2g](https://github.com/nuxt/nuxt/security/advisories/GHSA-6m

历史摘要 · 未重新核验 · GitHub Advisory

Cross-site scripting via <NoScript> slot content in Nuxt's head components

### Impact Nuxt's globally registered `` component (from `@unhead/vue` head components, re-exported by Nuxt) wrote its

历史摘要 · 未重新核验 · GitHub Advisory

n8n: SecurityScorecard Node Leaks API Token to User-Controlled Host

CVE-2026-54304

## Impact An authenticated user with permission to create or modify workflows and access to a SecurityScorecard credenti

历史摘要 · 未重新核验 · GitHub Advisory

n8n: MCP Browser HTTP Transport Exposes Unauthenticated Browser-Control Sessions

CVE-2026-54309

## Impact When `@n8n/mcp-browser` is run in HTTP transport mode, the MCP endpoint accepts session initialization and too

历史摘要 · 未重新核验 · GitHub Advisory

n8n: Cross-Tenant Credential Takeover via Dynamic Credentials EE Endpoints

CVE-2026-54305

## Impact Three EE endpoints used by the Dynamic Credentials feature accepted any authenticated n8n session without perf

历史摘要 · 未重新核验 · GitHub Advisory

n8n: Credential Exfiltration via Permission Bypass

CVE-2026-54307

## Impact A member-level user with editor access to a shared workflow could reference credentials they do not own via sp

历史摘要 · 未重新核验 · GitHub Advisory

n8n: Denial of Service via ZIP decompression in webhook workflow

CVE-2026-54314

## Impact The Compression node's Decompress operation expanded attacker-controlled archives into memory without enforcin

历史摘要 · 未重新核验 · GitHub Advisory

n8n: Public API Execution Retry Authorization Bypass

## Impact The Public API endpoint for retrying executions authorized access using `workflow:read` rather than `workflow:

历史摘要 · 未重新核验 · GitHub Advisory

n8n: Python Code Node AST Validator Bypass

## Impact An authenticated user with permission to create or modify workflows containing a Python Code node could bypass

历史摘要 · 未重新核验 · GitHub Advisory

n8n: Stored XSS in Chat Trigger Node

CVE-2026-54302

## Impact An authenticated user with workflow edit access could inject arbitrary JavaScript into the Chat Trigger's gene

历史摘要 · 未重新核验 · GitHub Advisory

n8n: Reflected XSS via Facebook, WhatsApp, and Microsoft Teams Trigger Webhook Verification Endpoints

CVE-2026-54303

## Impact An endpoint in the Meta and Microsoft Teams trigger nodes reflects a query parameter into the HTTP response wi

历史摘要 · 未重新核验 · GitHub Advisory

n8n: Microsoft SQL Node Prototype Pollution

CVE-2026-54312

## Impact An authenticated user with permission to create or modify workflows could achieve global prototype pollution v

历史摘要 · 未重新核验 · GitHub Advisory

Nuxt: Dev server discloses project absolute path and persistent workspace UUID via `/.well-known/appspecific/com.chrome.devtools.json`

### Summary When running `nuxt dev`, Nuxt registers an unauthenticated route at `/.well-known/appspecific/com.chrome.de

历史摘要 · 未重新核验 · GitHub Advisory

aws-cdk-lib: OS Command Injection in NodejsFunction Bundling

CVE-2026-11417

### Summary AWS CDK (`aws-cdk-lib`) is an open-source framework for defining cloud infrastructure in code and provisioni

历史摘要 · 未重新核验 · GitHub Advisory

markdown-it: Quadratic complexity DoS in smartquotes rule via replaceAt string operations

CVE-2026-48988

### Summary A quadratic time complexity vulnerability exists in markdown-it's smartquotes rule (enabled via the `typogr

历史摘要 · 未重新核验 · GitHub Advisory