Skip to content

Commit 6a6ae14

Browse files
advisory-database[bot]advisory-database[bot]
committed
Publish Advisories
GHSA-vgvm-wwrq-c4xw GHSA-84xh-pwc6-7g4g GHSA-499f-rpfh-94vx GHSA-5xrp-6693-jjx9 GHSA-9m4g-m3p5-p6gm GHSA-fm67-x2fw-2g76 GHSA-gpp2-hwq5-2xp4 GHSA-m4rj-q4ph-fr4v GHSA-r2jv-fwfr-4j8c GHSA-r2rp-r5cj-6c6x GHSA-xc99-2v4m-jv2w
1 parent d41fbe9 commit 6a6ae14

11 files changed

Lines changed: 222 additions & 6 deletions

File tree

‎advisories/unreviewed/2023/07/GHSA-vgvm-wwrq-c4xw/GHSA-vgvm-wwrq-c4xw.json‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
{
22
"schema_version": "1.4.0",
33
"id": "GHSA-vgvm-wwrq-c4xw",
4-
"modified": "2025-09-18T21:30:54Z",
4+
"modified": "2026-01-27T15:30:26Z",
55
"published": "2023-07-06T21:14:53Z",
66
"aliases": [
77
"CVE-2023-29240"

‎advisories/unreviewed/2025/02/GHSA-84xh-pwc6-7g4g/GHSA-84xh-pwc6-7g4g.json‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
{
22
"schema_version": "1.4.0",
33
"id": "GHSA-84xh-pwc6-7g4g",
4-
"modified": "2026-01-23T21:30:33Z",
4+
"modified": "2026-01-27T15:30:26Z",
55
"published": "2025-02-05T18:34:46Z",
66
"aliases": [
77
"CVE-2025-23419"

‎advisories/unreviewed/2026/01/GHSA-499f-rpfh-94vx/GHSA-499f-rpfh-94vx.json‎

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
{
22
"schema_version": "1.4.0",
33
"id": "GHSA-499f-rpfh-94vx",
4-
"modified": "2026-01-16T15:31:25Z",
4+
"modified": "2026-01-27T15:30:27Z",
55
"published": "2026-01-16T15:31:25Z",
66
"aliases": [
77
"CVE-2026-0696"
@@ -22,6 +22,10 @@
2222
{
2323
"type": "WEB",
2424
"url": "https://www.connectwise.com/company/trust/security-bulletins/2026-01-15-psa-security-fix"
25+
},
26+
{
27+
"type": "WEB",
28+
"url": "https://www.themissinglink.com.au/security-advisories/cve-2026-0696"
2529
}
2630
],
2731
"database_specific": {

‎advisories/unreviewed/2026/01/GHSA-5xrp-6693-jjx9/GHSA-5xrp-6693-jjx9.json‎

Lines changed: 40 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,40 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-5xrp-6693-jjx9",
4+
"modified": "2026-01-27T15:30:32Z",
5+
"published": "2026-01-27T15:30:32Z",
6+
"aliases": [
7+
"CVE-2026-1470"
8+
],
9+
"details": "n8n contains a critical Remote Code Execution (RCE) vulnerability in its workflow Expression evaluation system. Expressions supplied by authenticated users during workflow configuration may be evaluated in an execution context that is not sufficiently isolated from the underlying runtime.\n\nAn authenticated attacker could abuse this behavior to execute arbitrary code with the privileges of the n8n process. Successful exploitation may lead to full compromise of the affected instance, including unauthorized access to sensitive data, modification of workflows, and execution of system-level operations.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H"
14+
}
15+
],
16+
"affected": [],
17+
"references": [
18+
{
19+
"type": "ADVISORY",
20+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-1470"
21+
},
22+
{
23+
"type": "WEB",
24+
"url": "https://github.com/n8n-io/n8n/commit/aa4d1e5825829182afa0ad5b81f602638f55fa04"
25+
},
26+
{
27+
"type": "WEB",
28+
"url": "https://research.jfrog.com/vulnerabilities/n8n-expression-node-rce"
29+
}
30+
],
31+
"database_specific": {
32+
"cwe_ids": [
33+
"CWE-95"
34+
],
35+
"severity": "CRITICAL",
36+
"github_reviewed": false,
37+
"github_reviewed_at": null,
38+
"nvd_published_at": "2026-01-27T15:15:57Z"
39+
}
40+
}

‎advisories/unreviewed/2026/01/GHSA-9m4g-m3p5-p6gm/GHSA-9m4g-m3p5-p6gm.json‎

Lines changed: 40 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,40 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-9m4g-m3p5-p6gm",
4+
"modified": "2026-01-27T15:30:32Z",
5+
"published": "2026-01-27T15:30:32Z",
6+
"aliases": [
7+
"CVE-2026-1489"
8+
],
9+
"details": "A flaw was found in GLib. An integer overflow vulnerability in its Unicode case conversion implementation can lead to memory corruption. By processing specially crafted and extremely large Unicode strings, an attacker could trigger an undersized memory allocation, resulting in out-of-bounds writes. This could cause applications utilizing GLib for string conversion to crash or become unstable.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L"
14+
}
15+
],
16+
"affected": [],
17+
"references": [
18+
{
19+
"type": "ADVISORY",
20+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-1489"
21+
},
22+
{
23+
"type": "WEB",
24+
"url": "https://access.redhat.com/security/cve/CVE-2026-1489"
25+
},
26+
{
27+
"type": "WEB",
28+
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2433348"
29+
}
30+
],
31+
"database_specific": {
32+
"cwe_ids": [
33+
"CWE-787"
34+
],
35+
"severity": "MODERATE",
36+
"github_reviewed": false,
37+
"github_reviewed_at": null,
38+
"nvd_published_at": "2026-01-27T15:15:57Z"
39+
}
40+
}

‎advisories/unreviewed/2026/01/GHSA-fm67-x2fw-2g76/GHSA-fm67-x2fw-2g76.json‎

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -25,7 +25,9 @@
2525
}
2626
],
2727
"database_specific": {
28-
"cwe_ids": [],
28+
"cwe_ids": [
29+
"CWE-20"
30+
],
2931
"severity": "CRITICAL",
3032
"github_reviewed": false,
3133
"github_reviewed_at": null,

‎advisories/unreviewed/2026/01/GHSA-gpp2-hwq5-2xp4/GHSA-gpp2-hwq5-2xp4.json‎

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
{
22
"schema_version": "1.4.0",
33
"id": "GHSA-gpp2-hwq5-2xp4",
4-
"modified": "2026-01-23T18:31:28Z",
4+
"modified": "2026-01-27T15:30:26Z",
55
"published": "2026-01-16T15:31:25Z",
66
"aliases": [
77
"CVE-2026-0695"
@@ -22,6 +22,10 @@
2222
{
2323
"type": "WEB",
2424
"url": "https://www.connectwise.com/company/trust/security-bulletins/2026-01-15-psa-security-fix"
25+
},
26+
{
27+
"type": "WEB",
28+
"url": "https://www.themissinglink.com.au/security-advisories/cve-2026-0695"
2529
}
2630
],
2731
"database_specific": {

‎advisories/unreviewed/2026/01/GHSA-m4rj-q4ph-fr4v/GHSA-m4rj-q4ph-fr4v.json‎

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -25,7 +25,9 @@
2525
}
2626
],
2727
"database_specific": {
28-
"cwe_ids": [],
28+
"cwe_ids": [
29+
"CWE-400"
30+
],
2931
"severity": "HIGH",
3032
"github_reviewed": false,
3133
"github_reviewed_at": null,

‎advisories/unreviewed/2026/01/GHSA-r2jv-fwfr-4j8c/GHSA-r2jv-fwfr-4j8c.json‎

Lines changed: 44 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,44 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-r2jv-fwfr-4j8c",
4+
"modified": "2026-01-27T15:30:31Z",
5+
"published": "2026-01-27T15:30:31Z",
6+
"aliases": [
7+
"CVE-2026-1213"
8+
],
9+
"details": "All versions of askbot before and including 0.12.2 allow an attacker authenticated with normal user permissions to modify the profile picture of other application users.This issue affects askbot: 0.12.2.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V4",
13+
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
14+
}
15+
],
16+
"affected": [],
17+
"references": [
18+
{
19+
"type": "ADVISORY",
20+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-1213"
21+
},
22+
{
23+
"type": "WEB",
24+
"url": "https://github.com/ASKBOT/askbot-devel/commit/3da3d75f35204aa71633c7a315327ba39cb6295d"
25+
},
26+
{
27+
"type": "WEB",
28+
"url": "https://askbot.com"
29+
},
30+
{
31+
"type": "WEB",
32+
"url": "https://fluidattacks.com/advisories/ghost"
33+
}
34+
],
35+
"database_specific": {
36+
"cwe_ids": [
37+
"CWE-639"
38+
],
39+
"severity": "MODERATE",
40+
"github_reviewed": false,
41+
"github_reviewed_at": null,
42+
"nvd_published_at": "2026-01-27T14:15:55Z"
43+
}
44+
}

‎advisories/unreviewed/2026/01/GHSA-r2rp-r5cj-6c6x/GHSA-r2rp-r5cj-6c6x.json‎

Lines changed: 40 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,40 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-r2rp-r5cj-6c6x",
4+
"modified": "2026-01-27T15:30:31Z",
5+
"published": "2026-01-27T15:30:31Z",
6+
"aliases": [
7+
"CVE-2026-1484"
8+
],
9+
"details": "A flaw was found in the GLib Base64 encoding routine when processing very large input data. Due to incorrect use of integer types during length calculation, the library may miscalculate buffer boundaries. This can cause memory writes outside the allocated buffer. Applications that process untrusted or extremely large Base64 input using GLib may crash or behave unpredictably.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L"
14+
}
15+
],
16+
"affected": [],
17+
"references": [
18+
{
19+
"type": "ADVISORY",
20+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-1484"
21+
},
22+
{
23+
"type": "WEB",
24+
"url": "https://access.redhat.com/security/cve/CVE-2026-1484"
25+
},
26+
{
27+
"type": "WEB",
28+
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2433259"
29+
}
30+
],
31+
"database_specific": {
32+
"cwe_ids": [
33+
"CWE-787"
34+
],
35+
"severity": "MODERATE",
36+
"github_reviewed": false,
37+
"github_reviewed_at": null,
38+
"nvd_published_at": "2026-01-27T14:15:56Z"
39+
}
40+
}

0 commit comments

Comments
 (0)