CVE Vulnerability Database
Search and browse 420,383 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-118675 | HIGH | 7.1 | 0.2% | Oct 28, 2026 | n8n before 1.123.85, 2.43.5, and 2.44.1 contains a credential guard bypass vulnerability that allows editors of shared w... |
| CVE-2026-118649 | HIGH | 8.3 | 0.3% | Oct 28, 2026 | n8n before 2.43.5 and 2.44.x before 2.44.1 accepts a client-supplied workflow ID and caches each workflow's owner projec... |
| CVE-2026-118648 | HIGH | 7.3 | 0.3% | Oct 28, 2026 | n8n before 1.123.85, 2.x before 2.43.5, and 2.44.x before 2.44.1 contains a stored cross-site scripting vulnerability be... |
| CVE-2026-118647 | HIGH | 8.2 | 0.3% | Oct 28, 2026 | n8n before 1.123.85, 2.x before 2.43.5, and 2.44.x before 2.44.1 saves the SeaTable Trigger node's API token in error ex... |
| CVE-2026-118646 | MEDIUM | 6.5 | 0.2% | Oct 28, 2026 | n8n before 1.123.85, 2.43.5, and 2.44.1 contains a regular expression denial of service vulnerability that allows authen... |
| CVE-2026-118645 | HIGH | 8.7 | 0.2% | Oct 28, 2026 | n8n before 1.123.85, 2.x before 2.43.5, and 2.44.x before 2.44.1 contains a filter injection vulnerability in the Quick ... |
| CVE-2026-118644 | HIGH | 7.7 | 0.2% | Oct 28, 2026 | n8n before 2.41.5 and 2.42.x before 2.42.2 passes a failed workflow's full execution context, including the identity of ... |
| CVE-2026-118643 | HIGH | 8.2 | 0.3% | Oct 28, 2026 | n8n before 1.123.85, 2.x before 2.43.5, and 2.44.x before 2.44.1 stores credential secrets in execution error data when ... |
| CVE-2026-118642 | HIGH | 7.1 | 0.2% | Oct 28, 2026 | n8n before 1.123.85, 2.43.5, and 2.44.1 contains an authorization bypass vulnerability that allows authenticated members... |
| CVE-2026-118641 | HIGH | 7.5 | 0.3% | Oct 28, 2026 | n8n before 1.123.85, 2.x before 2.43.5, and 2.44.x before 2.44.1 contains an OData $filter injection vulnerability in th... |
| CVE-2026-118640 | MEDIUM | 5.4 | 0.2% | Oct 28, 2026 | n8n before 1.123.85, 2.43.5, and 2.44.1 contains an authorization bypass vulnerability in Chat Hub that allows chat-only... |
| CVE-2026-118633 | HIGH | 8.1 | 0.6% | Oct 28, 2026 | A path traversal vulnerability allows a remote unauthenticated attacker to execute arbitrary code as root in Sophos UTM ... |
| CVE-2026-118265 | MEDIUM | 5.3 | 0.1% | Oct 28, 2026 | Echo is a Go web framework. From 5.0.0 until 5.4.1, Echo v5's ExtractIPFromRealIPHeader validates whether the client-sup... |
| CVE-2026-118264 | CRITICAL | 9.1 | 0.4% | Oct 28, 2026 | Echo is a Go web framework. From 4.0.0 until 4.16.1 and 5.4.1, Echo's Proxy middleware selects a raw tunnel from a clien... |
| CVE-2026-118263 | MEDIUM | 6.3 | 0.4% | Oct 28, 2026 | Echo is a Go web framework. From 5.0.0 until 5.4.1, Echo v5's BodyDump middleware can discard a BodyLimit overflow error... |
| CVE-2026-118262 | HIGH | 8.2 | 0.3% | Oct 28, 2026 | Echo is a Go web framework. From 4.15.0 until 4.16.1 and 5.4.1, Echo's Proxy middleware can retain a handler, copy gorou... |
| CVE-2026-118261 | HIGH | 8.2 | 0.4% | Oct 28, 2026 | Echo is a Go web framework. From 4.0.0 until 4.16.1, Echo v4's opt-in Decompress middleware exposes a gzip-decoded reque... |
| CVE-2026-118260 | HIGH | 8.2 | 0.4% | Oct 28, 2026 | Echo is a Go web framework. From 4.0.0 until 4.16.1, Echo v4's opt-in BodyDump middleware reads complete request bodies ... |
| CVE-2026-118259 | MEDIUM | 5.3 | 0.5% | Oct 28, 2026 | opentelemetry-java is the Java implementation of the OpenTelemetry API for recording telemetry, and SDK for managing tel... |
| CVE-2026-118258 | LOW | 3.7 | 0.3% | Oct 28, 2026 | i18next-http-backend is a backend layer for i18next that loads translation resources in Node.js, browsers, and Deno. Pri... |
| CVE-2026-118257 | HIGH | 7.2 | 0.3% | Oct 28, 2026 | Vue I18n is the internationalization plugin for Vue.js. From 11.1.10 until 11.4.14 and from 12.0.0-alpha.4 until 12.0.0-... |
| CVE-2026-118256 | LOW | 2.1 | 0.5% | Oct 28, 2026 | Vue I18n is the internationalization plugin for Vue.js. From 9.0.0-beta.5 until 11.4.14 and 12.0.0-alpha.5, enabling esc... |
| CVE-2026-118255 | HIGH | 8.4 | 0.3% | Oct 28, 2026 | Highcharts JS is a JavaScript charting library based on SVG. From 2.0.0 until 3.2.0, Highcharts Grid applies credits.hre... |
| CVE-2026-118254 | HIGH | 8.6 | 0.4% | Oct 28, 2026 | Highcharts JS is a JavaScript charting library based on SVG. From 2.0.0 until 3.2.0, Highcharts Grid writes pagination l... |
| CVE-2026-118253 | HIGH | 8.4 | 0.4% | Oct 28, 2026 | Highcharts JS is a JavaScript charting library based on SVG. From 1.0.0 until 4.2.3, Highcharts Dashboards edit mode par... |