CVE Vulnerability Catalog

Vulnerability in n8n before version 2.32.1 fails to enforce the Allowed HTTP Request Domains allowlist in multiple AI and LLM nodes when user-supplied base or endpoint URLs are configured. Low-privileged workflow editors with use-only access to shared credentials can redirect requests to attacker-controlled hosts and exfiltrate credential secrets for reuse against underlying services.

Vulnerability in n8n before version 1.123.67 contains a path traversal vulnerability in the Git node's fetch, pull, and push-tags operations that allows authenticated users to bypass repository-path containment checks. Attackers with workflow create/execute rights can point allowlisted remote configurations at local paths outside the sandbox to pull arbitrary git repositories and read their files and history.

Vulnerability in n8n before versions 1.123.67, 2.31.5, and 2.32.1 validates credential-access only for a node's top-level credentials and not for credentials referenced inside an Execute Sub-workflow node's inline workflow JSON. A member with Editor access to a shared workflow (when workflow sharing is enabled) who knows a target credential's ID can reference that credential in the inline JSON; it passes save-time and runtime validation and resolves in the parent workflow's project context, allowing the attacker to use or exfiltrate credentials they are not permitted to access.

Vulnerability in n8n before versions 1.123.67, 2.31.5, and 2.32.1 contains a prototype pollution vulnerability in the Edit Fields (Set) node. The node assigns output fields via a dot-notation path setter without restricting the field name, allowing an authenticated user to name a field after an inherited built-in method path and corrupt a shared global in the main Node.js process. Because that global is used on the request-authentication path, the instance then fails every authenticated request, causing an instance-wide denial of service for all users until the process is restarted.

Information disclosure vulnerability in Nuxt versions >= 4.4.7 and < 4.5.1, and >= 3.21.7 and < 3.21.10. The Chrome DevTools workspace endpoint in the development server trusts the Host header instead of the peer address, allowing an unauthenticated LAN attacker to retrieve the project's root directory path and a workspace UUID.

Vulnerability in Siemens License Server (SLS) versions before V5.1. An insecure sudoers policy allows local privilege escalation, enabling an attacker to execute arbitrary commands and plant malicious files as root.

Denial-of-service vulnerability in Desigo DXR2, PXC3, PXC4, PXC5.E003, PXC5.E24, and PXC7 devices in specific versions. Sending a malformed BACnet packet causes the device to stop responding to BACnet queries, requiring a reset or reboot to recover.

Vulnerability in LOGO! Soft Comfort versions before V9. The project password is stored as an unsalted SHA-256 hash, allowing an attacker with the project file to perform efficient offline dictionary or brute-force attacks.

Vulnerability in LOGO! Soft Comfort versions before V9. The product uses a static, hardcoded AES master key to encrypt project files. A local attacker can extract the key from application files or memory and use it to decrypt project files or remove passwords.

Stored SQL injection vulnerability in Koha through 24.11.17, 25.05.12, 25.11.06, and 26.05.01. Authenticated staff with borrowers => edit_borrowers permission can cause time-based denial of service by storing a SQL payload in a patron lang field, which executes when an issue slip is printed.

Stored SQL injection vulnerability in Koha through 24.11.17, 25.05.12, 25.11.06, and 26.05.01. Authenticated staff with tools => label_creator permission can execute arbitrary SQL via the image_name field of a patron card layout, allowing reading the entire database including patron PII and staff bcrypt password hashes.

Path traversal vulnerability in Intelliants Subrion CMS through 4.2.1. Authenticated administrators can delete arbitrary files on the server via the admin panel file deletion endpoint, which passes a user-supplied file path directly to unlink() without sanitization.

Server-side request forgery vulnerability in Apioo Fusio 8.8.3. Authenticated consumer-role users can make the server issue HTTP requests to internal network addresses by registering a webhook URL pointing to an internal host. The URL validation does not block IPs or hostnames.

Server-side request forgery vulnerability in Friendica through the 2026.08-dev branch. Authenticated users with a free self-registered account can probe internal network services via the link-preview endpoint, which fetches any user-supplied URL without applying an internal IP deny list.

A server-side request forgery vulnerability in HumanSignal Label Studio through 1.24.0.dev0 exists because SSRF_PROTECTION_ENABLED is set to false by default. The import-from-URL endpoint fetches any caller-supplied URL including internal loopback addresses. An authenticated user can use this to reach internal services, cloud metadata endpoints, and other resources.

A stored cross-site scripting vulnerability in HortusFox 5.9 allows authenticated workspace members to inject persistent JavaScript into plant notes via Parsedown rendered without safe mode. Notes are rendered unescaped in the browser of every user who views the affected plant. An attacker can steal session cookies or perform actions in the context of other users including administrators.

A broken access control vulnerability in Ladybird Web Solution Faveo Helpdesk 2.0.3 allows any self-registered customer to read ticket conversations belonging to other customers via the v1 REST API. The API verifies the existence of the requested ticket but not ownership, enabling access to arbitrary ticket threads including internal agent notes.

A stored cross-site scripting vulnerability in ElkArte Forum 2.0 Beta 1 allows any registered member to inject persistent JavaScript into the profile fields cust_blurb and cust_locate. The fields are saved without HTML encoding and rendered unescaped in profile views visible to administrators. An attacker can execute code in an administrator session, enabling session hijacking or privilege escalation.

An information disclosure vulnerability in OpenSignLabs OpenSign through 2.37.0 allows unauthenticated remote attackers to map any email address or username to its internal user objectId via the getUserId Parse cloud function. The function performs no authentication before resolving and returning the internal identifier. An attacker can enumerate user accounts and target subsequent attacks.

A missing authorization vulnerability in Windmill Labs Windmill through 1.783.0 allows authenticated operators to write job progress and read job metrics for any job in the workspace regardless of ownership. The job_metrics handlers accept no authorization extractor, bypassing workspace-level access controls. An operator can monitor sensitive job execution data and inject misleading progress for jobs they do not own.