● Live advisory feed
Security advisories from 24 sources — CISA, CERT-EU, NCSC-UK, BSI, CERT-FR, NCSC-NL, JPCERT/CC, JVN, HKCERT, the Canadian Cyber Centre, NVD, GitHub, Microsoft, Cisco, Fortinet, Palo Alto Networks and more — normalized, translated to English and flagged against the CISA KEV catalog. One global feed for CSIRTs, SOCs and defenders.
Summary Netty's OcspClient does not validate that the CertificateID in an OCSP response matches the requested CertificateID. A bad actor can replay a GOOD status response issued for an unrelated certificate (by the same CA) to bypass revocation checks for any certificate. Detail…
Any caller that can deliver bytes to a Netty channel pipeline containing XmlDecoder can send XML with a DOCTYPE declaration to a parser instantiated with no security configuration — but whether external entities are actually resolved depends on Aalto XML's async parser behavior, …
Summary Netty's Http3FrameCodec buffers incoming data for HTTP/3 reserved frame types up to the specified payload length without any limits. The payload length is read directly from the wire and trusted without validation. A bad actor can send a reserved frame with a payload leng…
Summary Netty's CorsHandler provides a shortCircuit() configuration designed to reject unauthorized cross-origin requests immediately, acting as a security control before requests reach the application. However, due to a logical operator error in the origin evaluation process, th…
The SpdyHttpDecoder handler in Netty's SPDY-to-HTTP codec allocates a pooled ByteBuf when processing a client-initiated SYN_STREAM frame with FLAG_FIN=0, storing the partially-constructed FullHttpRequest in an internal map (messageMap) to accumulate subsequent DATA frames. When t…
Description: An attacker, who controls the HTML input supplied to dompdf, can read arbitrary images from the server’s file system, bypassing the chroot restriction. The vulnerability is exploitable in the default configuration. Exploitation conditions: An external user Researcher…
The HAProxyMessageDecoder in netty's codec-haproxy module performs protocol version detection by reading the 13th byte of the inbound stream as a signed Java byte and widening it to int without masking. When an attacker sends a PROXY protocol v2 binary prefix (0D 0A 0D 0A 00 0D 0…
Summary Netty SPDY header decoding continues inflating zlib-compressed header blocks after the raw header parser has already exceeded maxHeaderSize and marked the frame truncated. At commit b2d2137c4404af425bf9d5d601a62576f5c06925, a 12,253-byte compressed SPDY header block can d…
Summary Netty's SPDY SETTINGS decoder accepts a peer-declared SETTINGS entry count up to the 24-bit frame-length limit and materializes every unique setting ID in DefaultSpdySettingsFrame without an implementation-level count cap. A remote SPDY/3.1 peer can send one syntactically…
Description Dompdf is vulnerable to a File Existence Oracle attack through the manipulation of the CSS @font-face directive. By providing malicious HTML that references local files via the file:// protocol repeatedly, an attacker can trigger PHP memory exhaustion. The critical …
Summary The chroot check for local files uses a prefix string check to enforce chroot boundaries. The simple string comparison it performs allows paths like /var/www/root_secret/file.html when chroot is /var/www/root. This allows attacker-controlled document paths/resources to b…
Sean Gilligan discovered that AIOHTTP did not properly limit memory usage when processing HTTP headers and trailers. An attacker could possibly use this issue to consume excessive system resources, resulting in a denial of service. (CVE-2026-22815) It was discovered that AIOHTTP …
Serial number: AV26-738 Date: July 22, 2026 On July 22, 2026, Drupal published security advisories to address a vulnerability in the following product. Included was a critical update for the following: Internationalization Single Sign-On – versions prior to 1.8.0 The Cyber Centre…
Serial number: AV26-737 Date: July 22, 2026 On July 22, 2026, Exim published a security advisory to address a vulnerability in the following product: Exim – version 4.88 to 4.99.4 The Cyber Centre encourages users and administrators to review the provided web links and apply the …
Serial number: AV26-736 Date: July 22, 2026 On July 21, 2026, Progress published security advisories to address vulnerabilities in the following product: ShareFile Storage Zones Controller v5 – versions prior to 5.12.4 ShareFile Storage Zones Controller v6 – versions prior to 6.0…
Serial number: AV26-734 Date: July 22, 2026 On July 22, 2026, Mitel published security advisories to address vulnerabilities in the following products. Included were critical updates for the following:: MiCollab – multiple versions OpenScape UC – multiple versions The Cyber Centr…
Impact When n8n was configured with a Google Service Account key, the full PEM private key was mistakenly placed in the JWT header's kid field (which should only have held a key identifier). Since JWT headers were Base64-encoded rather than encrypted, the key could be recovered b…
Impact The Resource Locator passes the workflow-persisted cachedResultUrl to window.open() without scheme validation. When a victim opens the crafted workflow and interact with external links, the JavaScript payload runs in the victim's browser. Patches The issue has been fixed …
Impact The HTML preview renders execution output into an iframe srcdoc without sandbox, so a sanitizer bypass lets injected script run same-origin as the editor. When a victim opens the preview, it can call authenticated APIs with their session. An account with global:member pri…
Impact A TOCTOU race condition in the Git node's clone operation lets an authenticated user bypass its path restrictions by swapping a directory for a symlink after the path is validated but before the clone runs. This plants a crafted repository in the community node directory, …
Impact In n8n's AI Agents feature, a user with the read-only Project Viewer role could escalate their privileges by chatting with an agent that has node tools enabled. The agent's node-execution tool was authorized only by the agent:execute scope and ran nodes using the project's…
Serial number: AV26-733 Date: July 22, 2026 On July 22, 2026, n8n published security advisories to address vulnerabilities in the following product: n8n – versions prior to 1.123.67 n8n – versions prior to 2.32.1 n8n – versions prior to 2.31.5 The Cyber Centre encourages users an…
Serial number: AV26-732 Date: July 22, 2026 On July 22, 2026, ISC published security advisories to address vulnerabilities in the following products: ISC BIND 9 – versions 9.11.0 to 9.18.50 ISC BIND 9 – versions 9.20.0 to 9.20.24 ISC BIND 9 – versions 9.21.0 to 9.21.23 BIND Suppo…
It was discovered that Exim incorrectly handled certain command line options. A local attacker could possibly use this issue to access files outside of the spool area. It was discovered that Exim incorrectly handled string expansion in .local files. A local attacker could possibl…
It was discovered that Apache HTTP Server's mod_ldap module incorrectly handled memory when processing per-directory configurations. A remote attacker could possibly use this issue to cause a denial of service or execute arbitrary code. (CVE-2026-29167) It was discovered that Apa…
It was discovered that Gawk incorrectly handled memory when processing input using the getline redirection. An attacker could possibly use this issue to cause a denial of service. (CVE-2026-40467) It was discovered that Gawk incorrectly handled certain integer calculations when a…
Serial number: AV26-731 Date: July 22, 2026 On July 21, 2026, Atlassian published a security advisory to address vulnerabilities, including some critical ones, in the following products: Bamboo Data Center and Server – multiple versions Bitbucket Data Center and Server – multiple…
Oracle has fixed multiple vulnerabilities in Oracle MySQL Server and MySQL Cluster. The vulnerabilities affect various versions of Oracle MySQL Server and MySQL Cluster. Some vulnerabilities allow an attacker with high privileges and network access to cause a denial-of-service (D…
Oracle has fixed multiple vulnerabilities in Java SE (including Oracle GraalVM and JavaFX components). Oracle Java SE and related products (Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition) contain various vulnerabilities that allow an unauthenticated attacker with netwo…
Oracle has fixed 84 vulnerabilities in various modules of Oracle PeopleSoft Enterprise, including HCM Talent Acquisition Manager, In-Memory Project Discovery, FIN Expenses, SCM eProcurement, CC Common Application Objects, SCM Order Management, CRM Common Objects, and FIN Program …
Oracle has fixed multiple vulnerabilities in Oracle BI Publisher (versions 8.2.0.0.0, 12.2.1.4.0, and 26.01.0.0.0) and Oracle Business Intelligence Enterprise Edition (versions 8.2.0.0.0 and 26.01.0.0.0). The vulnerabilities in Oracle BI Publisher and Oracle Business Intelligence…
Oracle has fixed vulnerabilities in various Financial Services modules. Oracle has also processed updates for various third-party products. The vulnerabilities include code injection via malicious schemas in Apache Avro, unauthorized access to sensitive data in various Oracle pro…
Oracle has fixed multiple vulnerabilities in Oracle Enterprise Manager Base Platform versions 13.5 and 24.1. The vulnerabilities in Oracle Enterprise Manager Base Platform allow attackers to perform unauthorized read, write, create, delete, and modify actions on sensitive data vi…
Serial number: AV26-730 Date: July 22, 2026 On July 21, 2026, Google published a security advisory to address vulnerabilities in the following product: Stable Channel Chrome for Desktop – versions prior to 150.0.7871.181/.182 (Windows/Mac), and 150.0.7871.181 (Linux) The Cyber Ce…
USN-8477-1 fixed a vulnerability in tar. That fix was incomplete and could cause tar to fail to extract old archives that recorded a nonzero size for directory entries, resulting in a regression. This update fixes the problem. We apologize for the inconvenience. Original advisory…
Serial number: AV26-729 Date: July 22, 2026 On July 21, 2026, Oracle published a security advisory to address vulnerabilities in multiple products. Included were critical updates for the following: Oracle Database Server Oracle APEX Oracle Autonomous Health Framework Oracle Essba…
Oracle has fixed vulnerabilities in Communications products and underlying third-party software. There are a total of 213 vulnerabilities, of which 67 are in Oracle products and 146 in third-party products for which updates have previously been released and are now included in th…
Oracle has fixed 39 vulnerabilities in Oracle Commerce Platform and Oracle Commerce Guided Search/Experience Manager, both version 11.4.0. 11 of these vulnerabilities have received a CVSS score of 9 or higher and are summarized below. The remaining vulnerabilities have lower scor…
Oracle has fixed 158 vulnerabilities in Oracle Database Server, APEX, Autonomous Health Framework, Essbase, Global Lifecycle Management, GoldenGate, NoSQL Database, Spatial Studio, SQL Developer, and TimesTen In-Memory Database. Of these vulnerabilities, 91 are from third-party p…
It was discovered that HTML-Parser incorrectly handled entity references when the input string was identical to an entity value in the lookup table. An attacker could possibly use this issue to obtain sensitive information.
Oracle has fixed multiple vulnerabilities in Oracle E-Business Suite, including various modules such as Work in Process, Application Object Library, HRMS, Applications Framework, Advanced Collections, Advanced Outbound Telephony, Advanced Pricing, Applications DBA, Bills of Mater…
It was discovered that libgphoto2 did not properly validate buffer boundaries when parsing EOS image format data. An attacker with physical access could possibly use this issue to obtain sensitive information. (CVE-2026-40333) It was discovered that libgphoto2 did not properly nu…
It was discovered that Kerberos had an integer underflow vulnerability in the berval2tl_data() function. An attacker could possibly use this issue to cause Kerberos to crash, resulting in a denial of service. (CVE-2026-11850) It was discovered that Kerberos had vulnerabilities in…
It was discovered that GStreamer Good Plugins incorrectly handled certain Matroska files. An attacker could possibly use this issue to cause GStreamer Good Plugins to crash, resulting in a denial of service. This issue only affected Ubuntu 22.04 LTS and Ubuntu 24.04 LTS. (CVE-202…
It was discovered that GIFLIB incorrectly handled certain GIF image files. If a user or automated system were tricked into opening a specially crafted GIF file, a remote attacker could use this issue to cause GIFLIB to crash, resulting in a denial of service, or possibly execute …
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-g3r5-9h93-4j2c. This link is maintained to preserve external references. Original Description n8n before 1.123.64, 2.29.8, and 2.30.1 contains a TOCTOU race condition in the Git node's clone o…
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-p3rg-hrf9-w9gj. This link is maintained to preserve external references. Original Description n8n before 1.123.64, 2.x before 2.29.8, and before 2.30.1 contains a DOM-based cross-site scriptin…
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-9r8p-h6cc-6qhm. This link is maintained to preserve external references. Original Description n8n versions before 1.123.64, 2.29.8, and 2.30.1 contain a credential exposure vulnerability: when…
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-q5xf-xhwf-cwqf. This link is maintained to preserve external references. Original Description n8n before 2.29.8 and 2.30.x before 2.30.1 (affected from 2.27.0, when the OAuth 2.1 consent and …
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-9wcp-9r3j-383q. This link is maintained to preserve external references. Original Description n8n before 1.123.64, 2.29.8, and 2.30.1 contains a stored DOM cross-site scripting vulnerability …