Auth.js: OAuth state, nonce, and PKCE check cookies are not bound to the provider that created them

GHSA-x445-f3h2-j279 MODERATE 5 days ago

## Summary Auth.js stores the OAuth/OIDC anti-CSRF checks (`state`, `nonce`, and the PKCE verifier) in global cookies that are not bound to the pr...

npm

No PRs yet

n8n: Snowflake Node executeQuery Operation Allows SQL Injection via Unparameterized Expression Interpolation

GHSA-652q-gvq3-74qv MODERATE 5 days ago

## Impact The n8n Snowflake node's Execute Query operation interpolated expression values directly into the SQL string, making queries built with ...

npm

No PRs yet

n8n: PostgresTrigger Node SQL Injection Allows Authenticated Users to Execute Arbitrary SQL on Connected PostgreSQL Instances

GHSA-jqwr-vx3p-r266 MODERATE 5 days ago

## Impact The Postgres Trigger node interpolated user-supplied identifier parameters (channel, function, and trigger names) into SQL statements wi...

npm

No PRs yet

n8n: Cross-Tenant Module-Cache Poisoning in the JS Task Runner

GHSA-9cmh-xcqm-5hqr MODERATE 5 days ago

## Impact n8n's JavaScript task runner shared one module cache across all users' Code-node executions, so a user able to run a Code node could poi...

npm

No PRs yet

JupyterLab: Cross-site scripting (XSS) via crafted settings file (`overrides.json`)

GHSA-pppj-hq3g-57pj HIGH 5 days ago

JupyterLab 4.5+ allows notebook settings to be shared and applied through an `overrides.json` file using the `Import` button in the Settings Editor...

pypi

No PRs yet

JupyterLab: Image viewer allows XSS when opening malicious image in new browser tab

GHSA-gx64-gj6p-pc4c HIGH 5 days ago

JupyterLab's image viewer allows for cross-site scripting (XSS) when a specially-crafted image file is opened through the image viewer and then ope...

pypi

No PRs yet

JupyterLab: PyPI extension blocklist package-name canonicalization bypass

GHSA-89vp-jrxv-24w8 MODERATE 5 days ago

JupyterLab's PyPI extension manager enforces `blocked_extensions_uris` by comparing the requested install name to blocklist entries with a custom s...

pypi

No PRs yet

JupyterLab PluginManager lock-rule enforcement bypass

GHSA-h5v5-8746-g7mm MODERATE 5 days ago

JupyterLab's plugin manager exposes administrator controls intended to prevent users from enabling or disabling selected plugins. Two server-side e...

pypi

No PRs yet

JupyterLab: Allowlist/blocklist check in `PyPIExtensionManager.install()` not enforced for direct callers (missing `await`)

GHSA-whvh-wf3x-g77j LOW 5 days ago

The extension allowlist/blocklist check inside `PyPIExtensionManager.install()` was not enforced due to a missing await. For purposes of JupyterLab...

pypi

No PRs yet

Next.js: Server-Side Request Forgery in Server Actions on custom servers

GHSA-89xv-2m56-2m9x CVE-2026-64649 HIGH 5 days ago

## Impact When a Server Action forwards or redirects a request, an attacker can cause the server to send that outbound request to a malicious host...

npm

63

Dependabot PRs

Next.js: Cache confusion of response bodies for requests with bodies

GHSA-68g3-v927-f742 CVE-2026-64648 MODERATE 5 days ago

## Impact A server-side `fetch` with a request body may return a cached **response** body from a different request to the same URL but different b...

npm

63

Dependabot PRs

Next.js: Cache confusion of response bodies for requests with bodies containing invalid UTF-8 byte sequences

GHSA-4633-3j49-mh5q CVE-2026-64647 MODERATE 5 days ago

## Impact A server-side `fetch` with a request body may return a cached **response** body from a different request to the same URL but different b...

npm

63

Dependabot PRs

Next.js: Unbounded Server Action payload in Edge runtime

GHSA-4c39-4ccg-62r3 CVE-2026-64646 MODERATE 6 days ago

## Impact Requests targeting Next.js applications using App Router with at least one Server Action can lead to excessive memory consumption if tha...

npm

63

Dependabot PRs

Next.js: Server-Side Request Forgery in rewrites via attacker-controlled destination hostname

GHSA-p9j2-gv94-2wf4 CVE-2026-64645 HIGH 6 days ago

## Impact A `rewrites()` or `redirects()` rule that builds its external destination hostname from request-controlled input can be pointed at an ar...

npm

63

Dependabot PRs

Next.js: Denial of Service in the Image Optimization API using SVGs

GHSA-q8wf-6r8g-63ch CVE-2026-64644 MODERATE 6 days ago

### Impact When self-hosting Next.js with the default image loader, the Image Optimization API can optimize remotely hosted images if configured (...

npm

63

Dependabot PRs

Next.js: Unauthenticated disclosure of internal Server Function endpoints

GHSA-955p-x3mx-jcvp CVE-2026-64643 MODERATE 6 days ago

## Impact In Next.js applications using App Router, Server Actions (`use server`) or `use cache` endpoints can be disclosed bypassing any authenti...

npm

63

Dependabot PRs

Next.js: Middleware / Proxy bypass in App Router applications using Turbopack and single locale

GHSA-6gpp-xcg3-4w24 CVE-2026-64642 HIGH 6 days ago

## Impact Crafted requests targeting Next.js applications using App Router built with Turbopack and a **single** entry in `config.i18n.locales` ca...

npm

63

Dependabot PRs

Next.js: Denial of Service in App Router using Server Actions

GHSA-m99w-x7hq-7vfj CVE-2026-64641 HIGH 6 days ago

## Impact Crafted requests targeting Next.js applications using App Router with at least one Server Action can lead to excessive CPU usage blockin...

npm

63

Dependabot PRs

Eclipse Jetty: DoS attack triggering OutOfMemory with 100-Continue requests

GHSA-9299-c6m4-mjhc CVE-2024-7708 HIGH 6 days ago

### Impact The original report: > Server handling of 100-Continue requests can lead to memory leak that can be abused to cause a Denial of Service...

maven

No PRs yet

Eclipse Jetty: Path parameter traversal

GHSA-w7x5-g22v-xqhr CVE-2026-8384 MODERATE 6 days ago

### Description (as reported) #### Summary In Jetty 12.1.8, org.eclipse.jetty.util.URIUtil.canonicalPath() may leave dot-dot path segments unnorm...

maven

No PRs yet

Eclipse Jetty: HTTP Authority/Host mismatch

GHSA-7p3p-8qv8-m2vh CVE-2026-6790 MODERATE 6 days ago

#### Summary Jetty currently accepts HTTP/2 and HTTP/3 requests where the regular Host header and the pseudo-header :authority do not match. As a ...

maven

No PRs yet

Eclipse Jetty: Cross-Request Leakage for trailers on HTTP/1.1 keep-alive connections

GHSA-f4v5-65jj-pcr2 CVE-2026-10051 MODERATE 6 days ago

### Description > FINDING — MEDIUM (HTTP/1.1 keep-alive connections with trailers) > HttpConnection._trailers Cross-Request Leakage (Never Reset B...

maven

No PRs yet

Eclipse Jetty Digest Authentication: ISO-8859-1 lossy encoding allows authentication bypass via character substitution

GHSA-2fvj-hgj9-j2gr CVE-2026-10050 HIGH 6 days ago

### Summary The `DigestAuthentication.apply()` method in Jetty's HTTP client uses `getBytes(StandardCharsets.ISO_8859_1)` at three locations (lines...

maven

No PRs yet

n8n: Custom Header Credential Values Leaked in Plaintext into LLM Node Execution Data

GHSA-89gh-3pgc-v5h2 CVE-2026-65589 MODERATE 6 days ago

## Impact Custom HTTP headers configured in credentials for certain LLM sub-nodes (including OpenAI, Anthropic, and Lemonade) are masked in the n8n...

npm

No PRs yet

Dompdf: Embedded SVG images can leak existence of files and directories within the filesystem

GHSA-j8qw-6jw8-r297 CVE-2026-59943 MODERATE 6 days ago

### Summary If a malicious actor can supply unrestricted content for rendering by Dompdf they can utilize the SVG rendering functionality to leak f...

packagist

No PRs yet

Dompdf: Denial of Service (DoS) via Resource Exhaustion using Oversized Image Bitmaps

GHSA-f5gf-2cj8-52g2 CVE-2026-59942 MODERATE 6 days ago

### Summary Dompdf v3.1.5 is vulnerable to a Denial of Service (DoS) attack via resource exhaustion. An attacker can crash the PHP process by provi...

packagist

No PRs yet

Dompdf: Uncontrolled resource consumption based on declared BMP dimensions

GHSA-8hg6-c449-896m CVE-2026-59941 MODERATE 6 days ago

### Summary dompdf accepts a BMP image and generates a PDF-compatible PNG based only on its *declared* header dimensions and never bounds width × ...

packagist

No PRs yet

LiteLLM: Custom Code Guardrails production endpoints bypass code safety checks

GHSA-72m8-9m7m-h278 CVE-2026-59821 LOW 6 days ago

### Impact LiteLLM's Custom Code Guardrails production create/update paths did not apply the same sandboxing and validation used by the test endpo...

pypi

No PRs yet

LiteLLM: MCP Authentication Bypass via OAuth2 Passthrough Fallback

GHSA-7488-6r32-c95q CVE-2026-59822 HIGH 6 days ago

### Impact LiteLLM's MCP Streamable HTTP endpoint could allow an unauthenticated attacker to establish an authenticated MCP session using an arbit...

pypi

No PRs yet

LiteLLM: Local file read via request-supplied OIDC file references

GHSA-4g5m-c9r5-49xf CVE-2026-59819 LOW 6 days ago

### Impact LiteLLM's `/health/test_connection` endpoint resolved request-supplied environment and OIDC file references in `litellm_params`. A prox...

pypi

No PRs yet

LiteLLM: Arbitrary file write via path traversal in Skills archive extraction

GHSA-5jmr-gcrj-2c9q CVE-2026-59820 MODERATE 6 days ago

### Impact LiteLLM Skills archive extraction did not sufficiently validate file paths from uploaded skill ZIP archives. An authenticated user with...

pypi

No PRs yet

n8n: Unauthenticated Endpoint Allows Cancellation of Any User's Active Test Webhook

GHSA-33q9-f52j-gc75 CVE-2026-65014 MODERATE 6 days ago

## Impact The `DELETE /${restEndpoint}/test-webhook/:id` route is registered before the authentication middleware is applied, allowing any unauthen...

npm

No PRs yet

n8n: GraphQL Node Bypasses "Allowed HTTP Request Domains" Restriction

GHSA-gq66-9cw5-j5jm CVE-2026-65596 MODERATE 6 days ago

## Impact The GraphQL node did not enforce the "Allowed HTTP Request Domains" restriction on HTTP-based credentials (such as Header Auth, Basic Aut...

npm

No PRs yet

n8n: Member-Level Users Can Execute Other Users' MCP Server Trigger Workflows via Missing OAuth Authorization Check

GHSA-q5xf-xhwf-cwqf CVE-2026-65594 MODERATE 6 days ago

## Impact The OAuth 2.1 consent and token-issuance flow introduced in n8n 2.27.0 does not verify that the authenticated user has access to the work...

npm

No PRs yet

n8n: computer-use Shell Sandbox Not Enforced on Linux and Windows

GHSA-fpg6-x68q-5793 CVE-2026-65590 MODERATE 6 days ago

## Impact The shell tool in the `@n8n/computer-use` package applied its sandbox restrictions only on macOS. On Linux and Windows, shell commands ex...

npm

No PRs yet

n8n: Authenticated Users Can Exhaust Temporary Disk Storage via Data-Table File Uploads

GHSA-w867-jm58-p9pv CVE-2026-58661 MODERATE 6 days ago

## Impact An authenticated user can repeatedly upload files to the data-table upload endpoint, bypassing the per-request quota check, which does no...

npm

No PRs yet

n8n: Improper Authorization Allows Authenticated Users to Assign Workflows to Folders in Other Projects

GHSA-2xgm-wc4g-5jvg CVE-2026-59253 MODERATE 6 days ago

## Impact An authenticated user with permission to create workflows in one project could bypass project/folder authorization boundaries during work...

npm

No PRs yet

n8n: External Secrets Accessible via Workflow Expressions Outside Credentials

GHSA-2434-3x6q-8r99 CVE-2026-59254 MODERATE 6 days ago

## Impact External secrets were incorrectly resolved in workflow node expressions, where they are not intended to be available. An authenticated us...

npm

No PRs yet

n8n: MySQL v1 Node executeQuery Operation Allows SQL Injection via Unparameterized Expression Interpolation

GHSA-hwmj-qg4v-cvg9 CVE-2026-59257 MODERATE 6 days ago

## Impact The legacy MySQL v1 node's `executeQuery` operation substitutes evaluated `{{ ... }}` expression values directly into the raw SQL string ...

npm

No PRs yet

n8n: External Secrets Permission Bypass via Expression Parser Mismatch

GHSA-jp7m-xcgx-57qm CVE-2026-59259 MODERATE 6 days ago

## Impact Due to a mismatch between the static validation check and the runtime expression engine, an authenticated user with credential create or ...

npm

No PRs yet

n8n: Path-Confinement Bypass in computer-use search_files Allows Reading Files Outside the Base Directory

GHSA-pf2q-pxhf-hgmw MODERATE 6 days ago

## Impact The component `@n8n/computer-use` file-search tool confined searches to a configured base directory. A crafted search pattern could bypa...

npm

No PRs yet

n8n: Prototype Pollution via VM Expression Engine Sandbox Escape Leads to Denial of Service

GHSA-hx4h-vr3m-45vh MODERATE 6 days ago

## Impact An authenticated user able to create or edit a workflow expression could abuse the expression engine's array-element access to obtain a ...

npm

No PRs yet

n8n: Prototype Pollution via Dot-Notation Field Names Leads To Instance-Wide Denial of Service

GHSA-xwx6-jjhv-84p8 HIGH 6 days ago

## Impact The Edit Fields (Set) node assigned output fields through a dot-notation path setter without restricting the field name, so an authentic...

npm

No PRs yet

n8n: Edit Image Node Format Injection Allows Arbitrary File Write

GHSA-xmc9-4f2h-jf9c HIGH 6 days ago

## Impact The n8n Edit Image node passed its output format to the underlying image library without validation, so a crafted value could write byte...

npm

No PRs yet

n8n: Shared-Workflow Editor Can Exfiltrate Credentials via Inline Sub-Workflow JSON

GHSA-cj9h-qx8g-pq2g HIGH 6 days ago

## Impact n8n's credential-access checks validated only a node's top-level credentials, not credentials referenced inside an Execute Sub-workflow ...

npm

No PRs yet

n8n: Credential Authorization Bypass via Expression in HTTP Request Node `genericAuthType`

GHSA-6qc9-mqvw-jg7x HIGH 6 days ago

## Impact An authenticated member with edit access to a shared workflow could reference another user's credential in an HTTP Request node while sp...

npm

No PRs yet

n8n: Expression sandbox escape via arrow-function bodies enabling command execution

GHSA-gv7g-jm28-cr3m HIGH 6 days ago

## Impact An authenticated user with permission to create or modify workflows could abuse crafted expressions using arrow functions to bypass the ...

npm

No PRs yet

n8n: Send Email Node Arbitrary File Read and SSRF via Nodemailer Content-Object Type Confusion

GHSA-2x35-3fw4-9jr4 HIGH 6 days ago

## Impact The n8n Send Email node did not enforce that its message fields were strings, so a crafted untrusted non-string value from a workflow ex...

npm

No PRs yet

n8n: Authenticated code execution in the n8n Git node

GHSA-rcv6-pvrj-4xcg HIGH 6 days ago

## Impact Authenticated n8n users with rights to create and execute workflows could achieve code execution on the n8n host. Using the Git node, un...

npm

No PRs yet

n8n: SSRF Protection Bypass via MCP Client Node

GHSA-vhf8-cg2h-cg3p MODERATE 6 days ago

## Impact On an n8n instance with SSRF protection enabled, the MCP Client node sent requests to a user-supplied endpoint without routing them thro...

npm

No PRs yet