Open Source Vulnerabilities

    Dashboard / Open Source Vulnerabilities

    CVE-2026-118675
    Fix available
    Packages

    Summary

    n8n before 1.123.85, 2.43.5, and 2.44.1 Credential Guard Bypass via Execute Sub-workflow

    Published
    28 Oct 2026
    CVE-2026-118649
    Fix available
    Packages

    Summary

    n8n before 2.43.5 and 2.44.1 Authorization Bypass via Crafted Workflow ID in Data Tables

    Published
    28 Oct 2026
    CVE-2026-118648
    Fix available
    Packages

    Summary

    n8n before 1.123.85, 2.43.5, and 2.44.1 Stored XSS via Webhook Responses Missing Sandbox Policy

    Published
    28 Oct 2026
    CVE-2026-118647
    Fix available
    Packages

    Summary

    n8n before 1.123.85, 2.43.5, and 2.44.1 SeaTable Trigger API Token Exposure via Execution Data

    Published
    28 Oct 2026
    CVE-2026-118646
    Fix available
    Packages

    Summary

    n8n before 1.123.85, 2.43.5, and 2.44.1 ReDoS via Read/Write Files Node

    Published
    28 Oct 2026
    CVE-2026-118645
    Fix available
    Packages

    Summary

    n8n before 1.123.85, 2.43.5, and 2.44.1 Filter Injection via Quick Base Node Where Parameter

    Published
    28 Oct 2026
    CVE-2026-118644
    Fix available
    Packages

    Summary

    n8n before 2.41.5 and 2.42.2 Credential Theft via Error-Workflow Context Inheritance

    Published
    28 Oct 2026
    CVE-2026-118643
    Fix available
    Packages

    Summary

    n8n before 1.123.85, 2.43.5, and 2.44.1 Credential Exposure via Node Execution Error Data

    Published
    28 Oct 2026
    CVE-2026-118642
    Fix available
    Packages

    Summary

    n8n before 1.123.85, 2.43.5, and 2.44.1 Credential Permission Check Bypass via Inline Sub-Workflows

    Published
    28 Oct 2026
    CVE-2026-118641
    Fix available
    Packages

    Summary

    n8n before 1.123.85, 2.43.5, and 2.44.1 OData $filter Injection via Outlook and SharePoint Nodes

    Published
    28 Oct 2026
    CVE-2026-118640
    Fix available
    Packages

    Summary

    n8n before 1.123.85, 2.43.5, and 2.44.1 Chat Hub Authorization Bypass

    Published
    28 Oct 2026
    CVE-2026-118261
    Fix available
    Packages

    Summary

    Echo: Decompress permits unbounded gzip expansion in v4

    Published
    28 Oct 2026
    CVE-2026-118260
    Fix available
    Packages

    Summary

    Echo: BodyDump captures request and response bodies without size limits in v4

    Published
    28 Oct 2026
    CGA-w8q6-g9j7-m7jf
    No fix available
    Packages

    supabase-studio-fips

    Summary

    Published
    28 Oct 2026
    CVE-2026-118259
    Fix available
    Packages

    Summary

    opentelemetry-java: Quadratic CPU consumption in W3C tracestate parsing

    Published
    28 Oct 2026
    CGA-3x5m-wv39-cpxj
    Fix available
    Packages

    opensearch-k8s-operator-3

    Summary

    Published
    28 Oct 2026
    CGA-q6mw-cmx8-6q94
    Fix available
    Packages

    opensearch-k8s-operator-3

    Summary

    Published
    28 Oct 2026
    CGA-cfjp-2qg5-2wgw
    Fix available
    Packages

    opensearch-k8s-operator-3

    Summary

    Published
    28 Oct 2026
    CGA-phjr-6783-j9vg
    Fix available
    Packages

    opensearch-k8s-operator-fips-2

    Summary

    Published
    28 Oct 2026
    CGA-8cq9-hf29-64cr
    Fix available
    Packages

    opensearch-k8s-operator-fips-2

    Summary

    Published
    28 Oct 2026
    CGA-r2j4-9r34-h8m4
    No fix available
    Packages

    step-issuer-fips

    Summary

    Published
    28 Oct 2026
    CGA-3v52-g43h-m9wr
    Fix available
    Packages

    art

    Summary

    Published
    28 Oct 2026
    CGA-h5gv-crhc-hj87
    Fix available
    Packages

    art

    Summary

    Published
    28 Oct 2026
    CVE-2026-118258
    Fix available
    Packages

    Summary

    i18next-http-backend: Query-parameter injection through & and = in lng when loadPath/addPath puts {{lng}} in the query string

    Published
    28 Oct 2026
    openSUSE-SU-2026:22198-1
    Fix available
    Packages

    vlc

    Summary

    Security update for vlc

    Published
    28 Oct 2026
    CGA-x5cg-49gr-xg4p
    Fix available
    Packages

    crossplane-2.2-crank, crossplane-2.2-crank

    Summary

    Published
    28 Oct 2026
    CVE-2026-118257
    Fix available
    Packages

    Summary

    Vue I18n: escapeParameter does not prevent XSS through srcdoc in translation messages

    Published
    28 Oct 2026
    CGA-mpwx-52jr-7w23
    No fix available
    Packages

    commercial-gitlab-workhorse-ee-fips-19.4

    Summary

    Published
    28 Oct 2026
    CGA-4mrv-c755-6pr6
    No fix available
    Packages

    commercial-gitlab-workhorse-ee-fips-19.4

    Summary

    Published
    28 Oct 2026
    CVE-2026-118256
    Fix available
    Packages

    Summary

    Vue I18n: `escapeParameter` does not escape named values when the same call also passes a list

    Published
    28 Oct 2026
    ALPINE-CVE-2026-79656
    Fix available
    Packages

    grafana

    Summary

    Published
    28 Oct 2026
    CGA-xfm7-mprr-f2ff
    Fix available
    Packages

    opensearch-k8s-operator-fips-3

    Summary

    Published
    28 Oct 2026
    CGA-pvm9-555c-q5c7
    Fix available
    Packages

    opensearch-k8s-operator-fips-3

    Summary

    Published
    28 Oct 2026
    CGA-gw3v-84cx-8xr6
    Fix available
    Packages

    opensearch-k8s-operator-fips-3

    Summary

    Published
    28 Oct 2026
    DEBIAN-CVE-2026-117501
    Fix available
    Packages

    libhttp-body-perl, libhttp-body-perl, libhttp-body-perl

    Summary

    Published
    28 Oct 2026
    DEBIAN-CVE-2026-117500
    Fix available
    Packages

    libhttp-body-perl, libhttp-body-perl, libhttp-body-perl

    Summary

    Published
    28 Oct 2026
    CVE-2026-118255
    Fix available
    Packages

    Summary

    Highcharts Grid: javascript: URL in credits.href runs script on click

    Published
    28 Oct 2026
    DEBIAN-CVE-2026-116794
    No fix available
    Packages

    rust-russh

    Summary

    Published
    28 Oct 2026
    DEBIAN-CVE-2026-116531
    Fix available
    Packages

    libhttp-body-perl, libhttp-body-perl, libhttp-body-perl

    Summary

    Published
    28 Oct 2026
    DEBIAN-CVE-2026-116285
    Fix available
    Packages

    libhttp-body-perl, libhttp-body-perl, libhttp-body-perl

    Summary

    Published
    28 Oct 2026
    DEBIAN-CVE-2026-116273
    Fix available
    Packages

    libmime-tools-perl, libmime-tools-perl, libmime-tools-perl

    Summary

    Published
    28 Oct 2026
    DEBIAN-CVE-2026-116272
    Fix available
    Packages

    libmime-tools-perl, libmime-tools-perl, libmime-tools-perl

    Summary

    Published
    28 Oct 2026
    DEBIAN-CVE-2026-116271
    Fix available
    Packages

    libmime-tools-perl, libmime-tools-perl, libmime-tools-perl

    Summary

    Published
    28 Oct 2026
    DEBIAN-CVE-2026-116270
    Fix available
    Packages

    libmime-tools-perl, libmime-tools-perl, libmime-tools-perl

    Summary

    Published
    28 Oct 2026
    DEBIAN-CVE-2026-116269
    Fix available
    Packages

    libmime-tools-perl, libmime-tools-perl, libmime-tools-perl

    Summary

    Published
    28 Oct 2026
    DEBIAN-CVE-2026-116268
    Fix available
    Packages

    libmime-tools-perl, libmime-tools-perl, libmime-tools-perl

    Summary

    Published
    28 Oct 2026
    DEBIAN-CVE-2026-116267
    Fix available
    Packages

    libmime-tools-perl, libmime-tools-perl, libmime-tools-perl

    Summary

    Published
    28 Oct 2026
    DEBIAN-CVE-2026-116266
    Fix available
    Packages

    libmime-tools-perl, libmime-tools-perl, libmime-tools-perl

    Summary

    Published
    28 Oct 2026
    DEBIAN-CVE-2026-116265
    Fix available
    Packages

    libmime-tools-perl, libmime-tools-perl, libmime-tools-perl

    Summary

    Published
    28 Oct 2026
    DEBIAN-CVE-2026-116264
    Fix available
    Packages

    libmime-tools-perl, libmime-tools-perl, libmime-tools-perl

    Summary

    Published
    28 Oct 2026