Security advisories

high2026-09-10

CVE-2026-87016-Open WebUI: Sign-in as another user via wildcard characters in the OAuth subject claim on SQLite

View chart →

open-webui/open-webui · GHSA-wpmr-8h3q-fwj7

critical2026-09-10

CVE-2026-88062- OmniRoute ACP Custom-Agent Remote Code Execution (RCE)

View chart →

diegosouzapw/omniroute · GHSA-hf57-cqmx-p4gr

medium2026-09-10

CVE-2026-86073-n8n: Per-Resource OAuth Consent Bypass via Unbound Refresh Token Resource Substitution

View chart →

n8n-io/n8n · GHSA-cw9w-vv67-hf73

medium2026-09-10

CVE-2026-86074-n8n: Instance AI Credential Setup Accepts Unvalidated Probe URL from Fetched Content

View chart →

n8n-io/n8n · GHSA-q5wm-mgqx-fv2f

medium2026-09-10

CVE-2026-86995-n8n: Git Node branch.<name>.remote Config Key Bypasses Sandbox Path Restriction, Enabling Local Git Repository Read

View chart →

n8n-io/n8n · GHSA-qgpw-8g46-w95v

medium2026-09-10

CVE-2026-86085-n8n: Cross-Tenant Project-Member PII Disclosure via Missing Per-Project Scope Check on Role Assignment Endpoints

View chart →

n8n-io/n8n · GHSA-cqr2-h44g-v75v

medium2026-09-10

CVE-2026-86993-n8n: Log Streaming Event Destinations Decrypt Generic-Auth Credentials Without Ownership Check

View chart →

n8n-io/n8n · GHSA-pq6c-vh67-xpm3

medium2026-09-10

CVE-2026-86084-n8n: Disabled OIDC SSO Endpoints Remain Active and Issue Valid Sessions

View chart →

n8n-io/n8n · GHSA-pf83-w3f9-8m37

medium2026-09-10

CVE-2026-86080-n8n: GitHub Trigger 422 Reuse Path Skips Webhook Secret Storage, Causing Signature Verification to Fail-Open

View chart →

n8n-io/n8n · GHSA-5m98-cgcr-xx3q

medium2026-09-10

CVE-2026-86079-n8n: Path Injection in Elasticsearch and ElasticSecurity Nodes via Unencoded Identifiers

View chart →

n8n-io/n8n · GHSA-f2cp-m7mv-8jpv

medium2026-09-10

CVE-2026-86078-n8n: Prototype Pollution via Workflow Structure Summary Can Lead to Denial of Service

View chart →

n8n-io/n8n · GHSA-679f-58pq-4v2c

medium2026-09-10

CVE-2026-86994-n8n: Cross-User Active Workflow ID and Lifecycle Event Disclosure via Missing userId Filter

View chart →

n8n-io/n8n · GHSA-65xw-2v52-jhxc

high2026-09-10

CVE-2026-86083-n8n: Expression Sandbox Escape via Shared Builtin Tampering and Code-Printer Injection Leads to Code Execution

View chart →

n8n-io/n8n · GHSA-6xcw-7xm6-48c6

medium2026-09-10

CVE-2026-86077-n8n: Anonymous Approval-Gate Bypass via Reused resumeToken over the Chat WebSocket

View chart →

n8n-io/n8n · GHSA-35jj-42hp-8gmq

medium2026-09-10

CVE-2026-88011-Traefik: ForwardAuth identity spoofing via dot-form header alias

View chart →

traefik/traefik · GHSA-rf44-j88r-hh8c

medium2026-09-10

CVE-2026-88012-Traefik: respondingTimeouts.readTimeout is not applied to HTTP/3, leaving slow-body uploads unbounded

View chart →

traefik/traefik · GHSA-7ghq-v6jf-g56c

high2026-09-10

CVE-2026-88060-Angular: SSR XSS via Unescaped <template> Content Across DocumentFragment Boundaries in Fallback Raw-Content Elements

View chart →

angular/angular · GHSA-v3p8-whq6-r5jg

high2026-09-10

CVE-2026-88056-Angular: SSRF and Cross-Origin Credential Disclosure via URL Resolution Discrepancy in SSR

View chart →

angular/angular · GHSA-f6mr-pjwc-34m4

medium2026-09-10

CVE-2026-88059-Angular: Information Leak via `HttpTransferCache` Bypass When Using `withRequestsMadeViaParent`

View chart →

angular/angular · GHSA-p297-fm68-3q8c

medium2026-09-10

CVE-2026-88057-Angular: Sanitization bypass via directive host bindings on concrete host elements in @angular/core and @angular/compiler

View chart →

angular/angular · GHSA-hh8m-fm6v-7cvg