CVE Vulnerability Database
Search and browse 423,905 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-110863 | HIGH | 8.1 | 0.3% | Oct 14, 2026 | Better Auth @better-auth/sso from 1.7.0-rc.2 before 1.7.3 contains an authentication bypass vulnerability that allows au... |
| CVE-2026-110862 | CRITICAL | 9.1 | 0.3% | Oct 14, 2026 | Better Auth from 1.4.0-beta.18 before 1.7.7 contains an authentication bypass vulnerability that allows unauthenticated ... |
| CVE-2026-110861 | LOW | 3.7 | 0.2% | Oct 14, 2026 | Better Auth @better-auth/drizzle-adapter and better-auth from 1.6.17 before 1.7.7, and @better-auth/kysely-adapter from ... |
| CVE-2026-110860 | MEDIUM | 6.1 | 0.1% | Oct 14, 2026 | GitPython from 3.1.62 before 3.2.0 contains a symlink-following flaw in Submodule.move(), which checks the destination o... |
| CVE-2026-110859 | HIGH | 7.5 | 0.3% | Oct 14, 2026 | GitPython before 3.2.0 contains an argument injection vulnerability in Head.checkout() that allows remote attackers to r... |
| CVE-2026-110858 | HIGH | 8.1 | 0.5% | Oct 14, 2026 | GitPython from 3.1.30 before 3.2.0 contains a remote code execution vulnerability in Remote.pull() whose unsafe-option g... |
| CVE-2026-110857 | HIGH | 7.5 | 0.4% | Oct 14, 2026 | GitPython before 3.2.0 contains a remote code execution vulnerability that allows attackers to run commands because Git.... |
| CVE-2026-110856 | HIGH | 7.5 | 0.3% | Oct 14, 2026 | GitPython before 3.2.0 contains a regular expression denial of service vulnerability in the _re_actor_epoch pattern used... |
| CVE-2026-110855 | MEDIUM | 6.5 | 0.2% | Oct 14, 2026 | GitPython before 3.2.0 contains an information disclosure vulnerability that allows malicious repositories to expand env... |
| CVE-2026-110854 | HIGH | 8.2 | 0.3% | Oct 14, 2026 | Parse Server before 8.6.97 and 9.0.0 before 9.10.2-alpha.6 does not handle errors raised while sending verification or p... |
| CVE-2026-110853 | HIGH | 7.1 | 0.2% | Oct 14, 2026 | n8n before 1.123.83 contains an authorization bypass vulnerability that allows authenticated members to spoof workflow i... |
| CVE-2026-110852 | MEDIUM | 6.3 | — | Oct 14, 2026 | n8n before 1.123.83, 2.x before 2.41.4, and 2.42.x before 2.42.1 contains an authentication bypass because dynamic-path ... |
| CVE-2026-110851 | MEDIUM | 6.1 | 0.2% | Oct 14, 2026 | n8n before 2.41.4 and 2.42.x before 2.42.1 contains an authorization bypass in the Agents create endpoint, which accepts... |
| CVE-2026-110850 | HIGH | 7.2 | 0.2% | Oct 14, 2026 | n8n before 2.41.4 and 2.42.0 before 2.42.1 does not validate credential ids stored in agent node parameters when an edit... |
| CVE-2026-110849 | HIGH | 7.2 | 0.2% | Oct 14, 2026 | n8n before 1.123.83, 2.41.4, and 2.42.1 contains a stored cross-site scripting vulnerability in the file-preview modal, ... |
| CVE-2026-110848 | MEDIUM | 6 | 0.3% | Oct 14, 2026 | n8n before 1.123.83, 2.x before 2.41.4, and 2.42.x before 2.42.1 contains a prototype pollution vulnerability in the AI ... |
| CVE-2026-110847 | HIGH | 7 | — | Oct 14, 2026 | n8n before 1.123.83, 2.x before 2.41.4, and 2.42.x before 2.42.1 contains a stored cross-site scripting vulnerability in... |
| CVE-2026-110846 | HIGH | 7 | 0.5% | Oct 14, 2026 | n8n before 2.41.4 and 2.42.x before 2.42.1 contains a signature bypass in the waiting-webhook endpoint, which selects Se... |
| CVE-2026-110845 | HIGH | 7.7 | 0.3% | Oct 14, 2026 | n8n before 1.123.83, 2.x before 2.41.4, and 2.42.x before 2.42.1 contains a code execution vulnerability in the Git node... |
| CVE-2026-110844 | HIGH | 7.2 | 0.3% | Oct 14, 2026 | n8n before 1.123.83 contains an authorization bypass vulnerability that allows shared-workflow editors to use credential... |
| CVE-2026-110843 | HIGH | 8.2 | 0.3% | Oct 14, 2026 | n8n before 2.41.4 and 2.42.x before 2.42.1 contains an uncontrolled resource consumption vulnerability in the unauthenti... |
| CVE-2026-110842 | HIGH | 7.7 | — | Oct 14, 2026 | n8n before 2.41.4 and 2.42.x before 2.42.1 contains a prototype pollution vulnerability in the MCP workflow-validation t... |
| CVE-2026-110841 | MEDIUM | 6.1 | 0.3% | Oct 14, 2026 | n8n before 2.41.4 and 2.42.0 contains an authorization bypass in the agent chat resume endpoint, which accepts a run ide... |
| CVE-2026-110840 | HIGH | 7 | 0.3% | Oct 14, 2026 | n8n before 2.41.4 and 2.42.x before 2.42.1 contains an SQL injection vulnerability in version 1 of the Microsoft SQL nod... |
| CVE-2026-110839 | HIGH | 7.1 | 0.2% | Oct 14, 2026 | FreeRDP 3.3.0 before 3.32.0, when built with WINPR_UTILS_IMAGE_JPEG=ON, has a heap-based out-of-bounds write in winpr_co... |