n8n before 2.25.7 and 2.26.x before 2.26.2 contains an abstract syntax tree (AST) security...
CVE-2026-56777
n8n before 2.25.7 and 2.26.x before 2.26.2 contains an abstract syntax tree (AST) security validator bypass in the Pytho
#severity:medium
共收录 5559 条相关情报。
← 返回所有主题ImageMagick before 7.1.2-22 contains an information disclosure vulnerability in the...
CVE-2026-56369
ImageMagick before 7.1.2-22 contains an information disclosure vulnerability in the PasskeyEncipherImage method due to A
Open WebUI before 0.6.27 contains a server-side request forgery vulnerability in the /api/v1...
CVE-2026-56399
Open WebUI before 0.6.27 contains a server-side request forgery vulnerability in the /api/v1/retrieval/process/web endpo
ImageMagick before 7.1.2-24 contains an incorrect policy check that allows attackers to create or...
CVE-2026-56377
ImageMagick before 7.1.2-24 contains an incorrect policy check that allows attackers to create or truncate files disallo
ImageMagick before 7.1.2-19 contains a memory leak vulnerability in the PNG encoder when writing...
CVE-2026-56365
ImageMagick before 7.1.2-19 contains a memory leak vulnerability in the PNG encoder when writing MNG images. Attackers c
n8n before 2.8.0 contains an authentication bypass vulnerability allowing authenticated SSO users...
CVE-2026-56350
n8n before 2.8.0 contains an authentication bypass vulnerability allowing authenticated SSO users to disable SSO enforce
Capgo before 12.128.2 contains a server-side validation bypass vulnerability in organization...
CVE-2026-56333
Capgo before 12.128.2 contains a server-side validation bypass vulnerability in organization security settings that allo
Capgo before 12.128.2 lacks an UPDATE row-level security policy for the build_requests table,...
CVE-2026-56334
Capgo before 12.128.2 lacks an UPDATE row-level security policy for the build_requests table, preventing API-key and ano
n8n contains a stored cross-site scripting vulnerability in the Chat Trigger node's Custom CSS...
CVE-2026-56356
n8n contains a stored cross-site scripting vulnerability in the Chat Trigger node's Custom CSS field due to a misconfigu
Capgo before 12.128.2 contains improper error handling in the /private/accept_invitation endpoint...
CVE-2026-56331
Capgo before 12.128.2 contains improper error handling in the /private/accept_invitation endpoint that returns HTTP 500
Flowise before 3.1.2 sets Access-Control-Allow-Origin to a hardcoded wildcard (*) on its text-to...
CVE-2026-56277
Flowise before 3.1.2 sets Access-Control-Allow-Origin to a hardcoded wildcard (*) on its text-to-speech (TTS) generation
Capgo before 12.128.2 contains an information disclosure vulnerability in the /private...
CVE-2026-56318
Capgo before 12.128.2 contains an information disclosure vulnerability in the /private/validate_password_compliance endp
ImageMagick before 7.1.2-19 contains an off-by-one error in morphology validation allowing out-of...
CVE-2026-56361
ImageMagick before 7.1.2-19 contains an off-by-one error in morphology validation allowing out-of-bounds heap buffer rea
Capgo before 12.128.2 contains an information disclosure vulnerability in the public...
CVE-2026-56327
Capgo before 12.128.2 contains an information disclosure vulnerability in the public.invite_user_to_org RPC function tha
Storage Concentrator (SC & SCVM) is vulnerable to reflected cross-site scripting due to...
CVE-2026-50040
Storage Concentrator (SC & SCVM) is vulnerable to reflected cross-site scripting due to unsanitized content being echoed
Capgo console.capgo.app/login before 12.128.2 accepts access_token and refresh_token in URL query...
CVE-2026-56224
Capgo console.capgo.app/login before 12.128.2 accepts access_token and refresh_token in URL query parameters, automatica
Inappropriate implementation in DevTools in Google Chrome prior to 150.0.7871.47 allowed an...
CVE-2026-14154
Inappropriate implementation in DevTools in Google Chrome prior to 150.0.7871.47 allowed an attacker who convinced a use
Inappropriate implementation in Glic in Google Chrome prior to 150.0.7871.47 allowed a remote...
CVE-2026-14153
Inappropriate implementation in Glic in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who convinced a u
Type Confusion in CSS in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to obtain...
CVE-2026-14148
Type Confusion in CSS in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to obtain potentially sensitive
Inappropriate implementation in TabStrip in Google Chrome prior to 150.0.7871.47 allowed a remote...
CVE-2026-14139
Inappropriate implementation in TabStrip in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who convinced