Open Source Vulnerabilities
knative-eventing-1.24-channel-controller
knative-eventing-1.24-channel-controller
knative-eventing-1.24-channel-controller
knative-eventing-1.24-channel-controller
knative-eventing-fips-1.24-jobsink
knative-eventing-fips-1.24-jobsink
knative-eventing-fips-1.24-jobsink
knative-eventing-fips-1.24-jobsink
neuvector-sigstore-interface, neuvector-sigstore-interface
neuvector-sigstore-interface/ neuvector-sigstore-interface
knative-eventing-fips-1.24-webhook
knative-eventing-fips-1.24-webhook
knative-eventing-fips-1.24-webhook
knative-eventing-fips-1.24-webhook
Echo: X-Real-IP extractor trusts the header value instead of the sending peer
Echo: X-Real-IP extractor trusts the header value instead of the sending peer
cilium-1.19-operator-aws, cilium-1.19-operator-aws
Echo: Rejected WebSocket upgrades can bypass Echo route-level access controls
Echo: Rejected WebSocket upgrades can bypass Echo route-level access controls
Echo: BodyDump can discard BodyLimit overflow errors for unknown-length requests
Echo: BodyDump can discard BodyLimit overflow errors for unknown-length requests
Echo: WebSocket proxy can retain connections and handlers after client disconnect
Echo: WebSocket proxy can retain connections and handlers after client disconnect
Wasmtime before 36.0.18, 37.0.0 before 48.0.6, and 49.0.0 before 49.0.3 Sandbox Escape via Symlink Rename
Wasmtime before 36.0.18, 37.0.0 before 48.0.6, and 49.0.0 before 49.0.3 Sandbox Escape via Symlink Rename
Coder before 2.29.21, 2.34.12, 2.35.9, 2.36.7, and 2.37.4 Missing Audience Validation in GCP Instance-Identity Authentication
Coder before 2.29.21, 2.34.12, 2.35.9, 2.36.7, and 2.37.4 Missing Audience Validation in GCP Instance-Identity Authentication
EspoCRM before 9.3.11 and 10.0.8 Unauthenticated Denial of Service via Password-Redaction Regex
EspoCRM before 9.3.11 and 10.0.8 Unauthenticated Denial of Service via Password-Redaction Regex
ToolJet 3.20.2-lts before 3.20.242-lts Signup Bypass via SignupDisableGuard
ToolJet 3.20.2-lts before 3.20.242-lts Signup Bypass via SignupDisableGuard
MONAI before 1.6.1 Missing Integrity Verification via check_hash in Downloads
MONAI before 1.6.1 Missing Integrity Verification via check_hash in Downloads
MONAI 1.2.0 before 1.6.1 Code Execution via bundle configs/logging.conf
MONAI 1.2.0 before 1.6.1 Code Execution via bundle configs/logging.conf
go-chi chi before 5.5.0 Authentication Bypass via SupressNotFound Middleware
go-chi chi before 5.5.0 Authentication Bypass via SupressNotFound Middleware
SiYuan 3.8.7 through 3.8.8 Path Traversal via GLOBALROOT Alias
SiYuan 3.8.7 through 3.8.8 Path Traversal via GLOBALROOT Alias
n8n before 1.123.83, 2.41.4, and 2.42.1 Slack Token Exfiltration via Slack Trigger
n8n before 1.123.83, 2.41.4, and 2.42.1 Slack Token Exfiltration via Slack Trigger
n8n before 2.41.4 and 2.42.1 Prototype Pollution DoS via Workflow History Compaction
n8n before 2.41.4 and 2.42.1 Prototype Pollution DoS via Workflow History Compaction
argo-cd-3.2-compat, argo-cd-3.2-compat
n8n before 2.41.4 and 2.42.1 Local Gateway Deep-Link Silent Re-pairing to Attacker Instance
n8n before 2.41.4 and 2.42.1 Local Gateway Deep-Link Silent Re-pairing to Attacker Instance
n8n before 1.123.85, 2.43.5, and 2.44.1 Credential Permission Check Bypass
n8n before 1.123.85, 2.43.5, and 2.44.1 Credential Permission Check Bypass
n8n before 1.123.85, 2.43.5, and 2.44.1 Credential Guard Bypass via Execute Sub-workflow
n8n before 1.123.85, 2.43.5, and 2.44.1 Credential Guard Bypass via Execute Sub-workflow
n8n before 2.43.5 and 2.44.1 Authorization Bypass via Crafted Workflow ID in Data Tables
n8n before 2.43.5 and 2.44.1 Authorization Bypass via Crafted Workflow ID in Data Tables
n8n before 1.123.85, 2.43.5, and 2.44.1 Stored XSS via Webhook Responses Missing Sandbox Policy
n8n before 1.123.85, 2.43.5, and 2.44.1 Stored XSS via Webhook Responses Missing Sandbox Policy
n8n before 1.123.85, 2.43.5, and 2.44.1 SeaTable Trigger API Token Exposure via Execution Data
n8n before 1.123.85, 2.43.5, and 2.44.1 SeaTable Trigger API Token Exposure via Execution Data
n8n before 1.123.85, 2.43.5, and 2.44.1 ReDoS via Read/Write Files Node
n8n before 1.123.85, 2.43.5, and 2.44.1 ReDoS via Read/Write Files Node
n8n before 1.123.85, 2.43.5, and 2.44.1 Filter Injection via Quick Base Node Where Parameter
n8n before 1.123.85, 2.43.5, and 2.44.1 Filter Injection via Quick Base Node Where Parameter
n8n before 2.41.5 and 2.42.2 Credential Theft via Error-Workflow Context Inheritance
n8n before 2.41.5 and 2.42.2 Credential Theft via Error-Workflow Context Inheritance
n8n before 1.123.85, 2.43.5, and 2.44.1 Credential Exposure via Node Execution Error Data
n8n before 1.123.85, 2.43.5, and 2.44.1 Credential Exposure via Node Execution Error Data
n8n before 1.123.85, 2.43.5, and 2.44.1 Credential Permission Check Bypass via Inline Sub-Workflows
n8n before 1.123.85, 2.43.5, and 2.44.1 Credential Permission Check Bypass via Inline Sub-Workflows
n8n before 1.123.85, 2.43.5, and 2.44.1 OData $filter Injection via Outlook and SharePoint Nodes
n8n before 1.123.85, 2.43.5, and 2.44.1 OData $filter Injection via Outlook and SharePoint Nodes
n8n before 1.123.85, 2.43.5, and 2.44.1 Chat Hub Authorization Bypass
n8n before 1.123.85, 2.43.5, and 2.44.1 Chat Hub Authorization Bypass
Echo: Decompress permits unbounded gzip expansion in v4
Echo: BodyDump captures request and response bodies without size limits in v4
Echo: BodyDump captures request and response bodies without size limits in v4
