n8n: Python Code Node AST Validator Bypass
## Impact An authenticated user with permission to create or modify workflows containing a Python Code node could bypass
#severity:medium
共收录 5584 条相关情报。
← 返回所有主题n8n: Reflected XSS via Facebook, WhatsApp, and Microsoft Teams Trigger Webhook Verification Endpoints
CVE-2026-54303
## Impact An endpoint in the Meta and Microsoft Teams trigger nodes reflects a query parameter into the HTTP response wi
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting')...
CVE-2026-12425
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in PowerSchool
In OpenStack Nova before 33.0.2, the server create API does not strip certain hint data. The...
CVE-2026-46448
In OpenStack Nova before 33.0.2, the server create API does not strip certain hint data. The resulting instance has no P
OpenClaw before 2026.5.6 contains an allowlist bypass vulnerability in the macOS Swift exec...
CVE-2026-53861
OpenClaw before 2026.5.6 contains an allowlist bypass vulnerability in the macOS Swift exec feature that misses combined
OpenClaw before 2026.4.25 contains an input validation vulnerability in tool group policy callers...
CVE-2026-53863
OpenClaw before 2026.4.25 contains an input validation vulnerability in tool group policy callers that accept unvalidate
OpenClaw before 2026.5.26 contains a hostname validation vulnerability allowing attackers to...
CVE-2026-53859
OpenClaw before 2026.5.26 contains a hostname validation vulnerability allowing attackers to bypass blocklist comparison
OpenClaw before 2026.4.24 contains an insecure file permissions vulnerability in config recovery...
CVE-2026-53856
OpenClaw before 2026.4.24 contains an insecure file permissions vulnerability in config recovery that restores OpenClaw.
OpenClaw before 2026.4.25 contains a privilege escalation vulnerability in internal and webchat...
CVE-2026-53854
OpenClaw before 2026.4.25 contains a privilege escalation vulnerability in internal and webchat command authentication t
OpenClaw before 2026.4.25 contains a control scope enforcement bypass vulnerability in the focus...
CVE-2026-53850
OpenClaw before 2026.4.25 contains a control scope enforcement bypass vulnerability in the focus command that allows aut
OpenClaw before 2026.5.6 contains a privilege escalation vulnerability in the Active Memory write...
CVE-2026-53847
OpenClaw before 2026.5.6 contains a privilege escalation vulnerability in the Active Memory write scope that allows Gate
OpenClaw before 2026.5.12 contains a notification bypass vulnerability allowing Slack reaction...
CVE-2026-53851
OpenClaw before 2026.5.12 contains a notification bypass vulnerability allowing Slack reaction events to enter the agent
OpenClaw before 2026.5.12 contains an information disclosure vulnerability in streamable-http MCP...
CVE-2026-53840
OpenClaw before 2026.5.12 contains an information disclosure vulnerability in streamable-http MCP servers that forwards
A flaw was found in libXpm. A local user with low privileges could exploit an Out-of-Bounds Read...
CVE-2026-4367
A flaw was found in libXpm. A local user with low privileges could exploit an Out-of-Bounds Read vulnerability in the `x
OpenClaw before 2026.4.29 contains a session visibility check bypass vulnerability in shared...
CVE-2026-53844
OpenClaw before 2026.4.29 contains a session visibility check bypass vulnerability in shared memory search that allows a
DNG SDK versions 1.7.1 2536 and earlier are affected by an out-of-bounds read vulnerability that...
CVE-2026-47963
DNG SDK versions 1.7.1 2536 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosur
Caddy: stripHTML template function bypass
CVE-2026-52846
### Summary Caddy’s `stripHTML` template function cannot reliably remove all HTML tags from input strings. Certain malfo
A flaw was found in GnuTLS. The `gnutls_pkcs11_token_set_pin` function, used for changing the...
CVE-2026-42014
A flaw was found in GnuTLS. The `gnutls_pkcs11_token_set_pin` function, used for changing the Security Officer PIN, can
A flaw was found in the GNOME localsearch (previously known as tracker-miners) MP3 Extractor ...
CVE-2026-1767
A flaw was found in the GNOME localsearch (previously known as tracker-miners) MP3 Extractor `tracker-extract-mp3` compo
A flaw was found in GNOME localsearch (previously known as tracker-miners) MP3 Extractor. When...
CVE-2026-1764
A flaw was found in GNOME localsearch (previously known as tracker-miners) MP3 Extractor. When processing specially craf