Advisory Catalog

n8n: Prototype Pollution via Workflow Structure Summary Can Lead to Denial of Service

n8n: Anonymous Approval-Gate Bypass via Reused resumeToken over the Chat WebSocket

n8n: Agent Workflow Tool Bypasses Sub-Workflow Caller Policy

Nodemailer: resolveContent() on a MailMessage bypasses disableFileAccess/disableUrlAccess when called with the legacy signature

n8n: Instance AI Credential Setup Accepts Unvalidated Probe URL from Fetched Content

n8n: Per-Resource OAuth Consent Bypass via Unbound Refresh Token Resource Substitution

Snowflake drivers writes sensitive information to logs

Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability

undici vulnerable to Denial of Service via unbounded decompression of compressed responses

undici vulnerable to Denial of Service via orphaned RetryHandler response body

undici vulnerable to Denial of Service via unhandled error in WebSocket permessage-deflate decompression

undici vulnerable to caching and replay of unsafe HTTP method responses

undici vulnerable to response truncation via oversized chunked responses in the dump interceptor

node-csv: Prototype replacement still reachable via columns path

Colord: Slow rejection of oversized malformed color strings

stream-json: pick/ignore/filter/replace filters are O(depth²) on nested input — small crafted JSON blocks the event loop for seconds→minutes (DoS)

HTTPX2: Conflicting Content-Length and Transfer-Encoding headers can be auto-generated

HTTPX2: Multipart part header injection via unvalidated file Content-Type and custom headers

HTTPX2: Quadratic SSE line buffering can cause CPU denial of service

LiteLLM: Authenticated SSRF and provider-credential exfiltration via unvalidated request-body routing parameters

Astro: Authorization bypass from missing path-segment boundary check when stripping the configured base

This module enables you to delete Webform submissions in bulk using a specified date range. The module doesn't sufficiently restrict access to the delete form. A [separate PHP fatal error issue](https://www.drupal.org/project/webform_submissions_delete/issues/3396717) may prevent exploitation in p

This module creates permissions per node content type to control access to unpublished content. The module has allowed view access for published content, overriding other access mechanisms that might have been in place.

This module enables you to add dynamic caption support to PhotoSwipe image galleries. The module doesn't sufficiently sanitize user-supplied input (such as image alt tags) in its dynamic caption script, leading to a Cross-Site Scripting (XSS) vulnerability. This vulnerability is mitigated by the f

A module to import media files into media library. The import folder is a plain textfield with no validation. Point it at any directory the web user can read, and the importer copies every file whose extension matches a selected media type into the public files directory and publishes it as a Media

This module enables you to restrict access to JSON:API routes based on specific user roles. The module doesn't sufficiently enforce access controls under scenarios where a request mimics an XMLHttpRequest.

This module enables you to add an extra layer of verification for user registration. The module doesn't sufficiently filter user-supplied input before output, resulting in an unauthenticated reflected Cross-site Scripting (XSS) vulnerability.

This module enables you to add extra layer of verification for user registration. The module doesn't sufficiently validate user-supplied input resulting in an account takeover vulnerability.

This module enables you use UI Patterns with blocks, for use in Layout Builder. The module doesn't sufficiently validate user input before passing to token replacement. This vulnerability is mitigated by the fact that an attacker must have a role with the ability to edit layout builder layouts.

Calculate Working Days allows you to calculate working days between 2 dates. This module doesn't sufficiently restrict access to its settings form.

This module enables you to automatically translate entities. The module doesn't sufficiently check access on the entity to be translated, related fields or referenced entities when performing an AI translation on an entity or when those fields / entities have a different access level than the paren

This submodule AI Translate enables you to automatically translate entities. The module doesn't sufficiently check access on the entity to be translated, related fields or referenced entities when performing an AI translation on an entity or when those fields / entities have a different access leve

This module enables AJAX updates for advanced search, facet, and search result blocks. The module doesn’t sufficiently check block access when arbitrary block IDs are submitted to its publicly accessible AJAX endpoint. This may allow an unauthenticated attacker to retrieve restricted block content.

Tiptap: mergeAttributes() turns an own __proto__ key into inherited executable DOM attributes

NLTK: Uncontrolled resource consumption in RecursiveDescentParser via ambiguous or left-recursive grammars

humanfs: Recursive copy follows symlinked files and copies data from outside the source tree

Apache Spark History Server allows stored cross-site scripting through unescaped application names

Vitest: Path Traversal / Arbitrary File Read via @vitest/mocker Redirect Mock

ApostropheCMS: Stored XSS via SVG SMIL URI-list scheme-policy bypass

SVGO: removeScripts incompletely sanitizes executable HTML in SVG foreignObject elements

Hono: Incomplete fix for CVE-2026-39408: `toSSG()` still writes files outside the output directory

Hono: Unbounded dot-notation nesting in `parseBody()` can cause memory exhaustion

Hono: Query parser reads parameters after the URL fragment, causing cache-key and proxy interpretation differentials

pypdf: Possible long runtimes/large memory usage when extracting XForm objects

pypdf: Possible long runtimes/large memory usage when retrieving outlines

pypdf: Possible infinite loop for TreeObject.insert_child

phpseclib — non-constant-time X25519 scalar multiplication permits full private-key recovery

Tornado: Incomplete fix for CVE-2026-35536: cookie attribute injection re-opened via the legacy case-insensitive `**kwargs` path in `set_cookie`

Filament: Multi-factor authentication (app) codes can still be used after a newer code has been used

sqlparse: Reindentation of tuple lists causes near-cap quadratic CPU consumption