Nodemailer from 3.0.0 before 10.0.10 contains a quadratic complexity denial of service...
CVE-2026-110872
Nodemailer from 3.0.0 before 10.0.10 contains a quadratic complexity denial of service vulnerability in the SMTP client
#severity:high
共收录 5417 条相关情报。
← 返回所有主题n8n before 1.123.83 contains an authorization bypass vulnerability that allows authenticated...
CVE-2026-110853
n8n before 1.123.83 contains an authorization bypass vulnerability that allows authenticated members to spoof workflow i
GitPython before 3.2.0 contains an argument injection vulnerability in Head.checkout() that...
CVE-2026-110859
GitPython before 3.2.0 contains an argument injection vulnerability in Head.checkout() that allows remote attackers to r
GitPython before 3.2.0 contains a remote code execution vulnerability that allows attackers to...
CVE-2026-110857
GitPython before 3.2.0 contains a remote code execution vulnerability that allows attackers to run commands because Git.
Parse Server before 8.6.97 and 9.0.0 before 9.10.2-alpha.6 does not handle errors raised while...
CVE-2026-110854
Parse Server before 8.6.97 and 9.0.0 before 9.10.2-alpha.6 does not handle errors raised while sending verification or p
GitPython before 3.2.0 contains a regular expression denial of service vulnerability in the...
CVE-2026-110856
GitPython before 3.2.0 contains a regular expression denial of service vulnerability in the _re_actor_epoch pattern used
GitPython before 3.2.0 contains an information disclosure vulnerability that allows malicious...
CVE-2026-110855
GitPython before 3.2.0 contains an information disclosure vulnerability that allows malicious repositories to expand env
n8n before 2.41.4 and 2.42.x before 2.42.1 contains a signature bypass in the waiting-webhook...
CVE-2026-110846
n8n before 2.41.4 and 2.42.x before 2.42.1 contains a signature bypass in the waiting-webhook endpoint, which selects Se
n8n before 1.123.83 contains an authorization bypass vulnerability that allows shared-workflow...
CVE-2026-110844
n8n before 1.123.83 contains an authorization bypass vulnerability that allows shared-workflow editors to use credential
n8n before 1.123.83, 2.x before 2.41.4, and 2.42.x before 2.42.1 contains a code execution...
CVE-2026-110845
n8n before 1.123.83, 2.x before 2.41.4, and 2.42.x before 2.42.1 contains a code execution vulnerability in the Git node
n8n before 1.123.83, 2.x before 2.41.4, and 2.42.x before 2.42.1 contains a stored cross-site...
CVE-2026-110847
n8n before 1.123.83, 2.x before 2.41.4, and 2.42.x before 2.42.1 contains a stored cross-site scripting vulnerability in
n8n before 1.123.83, 2.41.4, and 2.42.1 contains a stored cross-site scripting vulnerability in...
CVE-2026-110849
n8n before 1.123.83, 2.41.4, and 2.42.1 contains a stored cross-site scripting vulnerability in the file-preview modal,
n8n before 2.41.4 and 2.42.0 before 2.42.1 does not validate credential ids stored in agent node...
CVE-2026-110850
n8n before 2.41.4 and 2.42.0 before 2.42.1 does not validate credential ids stored in agent node parameters when an edit
n8n before 2.41.4 and 2.42.x before 2.42.1 contains a prototype pollution vulnerability in the...
CVE-2026-110842
n8n before 2.41.4 and 2.42.x before 2.42.1 contains a prototype pollution vulnerability in the MCP workflow-validation t
n8n before 2.41.4 and 2.42.x before 2.42.1 contains an uncontrolled resource consumption...
CVE-2026-110843
n8n before 2.41.4 and 2.42.x before 2.42.1 contains an uncontrolled resource consumption vulnerability in the unauthenti
FreeRDP from 3.0.0 before 3.32.0 contains an infinite loop vulnerability in http_response_recv()...
CVE-2026-110836
FreeRDP from 3.0.0 before 3.32.0 contains an infinite loop vulnerability in http_response_recv() that allows malicious g
FreeRDP from 3.0.0-beta1 before 3.32.0 fails to enforce cumulative or absolute size limits when...
CVE-2026-110833
FreeRDP from 3.0.0-beta1 before 3.32.0 fails to enforce cumulative or absolute size limits when reassembling RDPDR chann
FreeRDP from 2.0.0 before 3.32.0 contains a null pointer dereference vulnerability that allows...
CVE-2026-110834
FreeRDP from 2.0.0 before 3.32.0 contains a null pointer dereference vulnerability that allows malicious RDP servers to
n8n before 2.41.4 and 2.42.x before 2.42.1 contains an SQL injection vulnerability in version 1...
CVE-2026-110840
n8n before 2.41.4 and 2.42.x before 2.42.1 contains an SQL injection vulnerability in version 1 of the Microsoft SQL nod
FreeRDP shadow server from 3.0.0 before 3.32.0 dispatches input PDUs during the Confirm Active...
CVE-2026-110838
FreeRDP shadow server from 3.0.0 before 3.32.0 dispatches input PDUs during the Confirm Active state before authenticati