n8n: Regular Expression Denial of Service in the Default Blocked-File-Pattern Match via a Git Node…
Affects: n8n
Advisories
Security advisories for popular AI software, newest first, each linked to its public source.
331 advisories rated High
Open WebUI: Any authenticated user can reach the Azure platform channel via server-side web fetch
Affects: Open WebUI
Open WebUI: Non-admin users can delete admin-owned external knowledge connections via knowledge base…
Affects: Open WebUI
Open WebUI: SSRF into internal services via DNS rebinding in the Playwright web loader
Affects: Open WebUI
Open WebUI: Same-origin XSS to account takeover via terminal port-preview iframe hardcoding…
Affects: Open WebUI
Open WebUI: Sign-in as another user via wildcard characters in the OAuth subject claim on SQLite
Affects: Open WebUI
Open WebUI: Unauthenticated requests can stall the server via uncached OIDC fetches in back-channel logout
Affects: Open WebUI
n8n: Expression Sandbox Escape via Shared Builtin Tampering and Code-Printer Injection Leads to Code…
Affects: n8n
n8n: Expression Sandbox Escape via Class-Field Sanitizer Rebinding Can Lead to Code Execution
Affects: n8n
n8n: Unauthenticated Persistent Storage Exhaustion via OAuth Dynamic Client Registration Endpoint
Affects: n8n
n8n: Instance AI Credential Setup Accepts Unvalidated Probe URL from Fetched Content
Affects: n8n
n8n: Per-Resource OAuth Consent Bypass via Unbound Refresh Token Resource Substitution
Affects: n8n
Langflow: IBM Langflow OSS 1.0.0 through 1.10.2 could allow a remote authenticated attacker to obtain…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.11.2 allows an authenticated attacker to read arbitrary files…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.11.2 could allow a remote attacker to obtain sensitive…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.11.2 could allow a remote authenticated attacker to obtain…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.11.2 could allow a remote authenticated attacker to delete…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.11.2 could allow a remote attacker to obtain sensitive…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.11.2 could allow a remote authenticated attacker to execute…
Affects: Langflow
n8n: N8n versions before 1.123.73, 2.35.4, and 2.36.2 contain an expression sandbox escape in the…
Affects: n8n
n8n: N8n versions before 1.123.73, 2.35.4, and 2.36.2 contain a remote code execution vulnerability…
Affects: n8n
llama.cpp: Llama.cpp through commit 97f06e9, when started with the --reranking flag, allows remote…
Affects: llama.cpp
llama.cpp: Llama.cpp b5693 and before has a Reachable Assertion via the gguf_reader::read function
Affects: llama.cpp
llama.cpp: Llama.cpp b5693 and before is vulnerable to Uncontrolled Recursion in…
Affects: llama.cpp
MLflow: MLFLOW_ALLOW_PICKLE_DESERIALIZATION=False safety control bypassed by mlflow.statsmodels flavor…
Affects: MLflow
Hugging Face Transformers: Hugging Face Transformers downloads custom generation code before trust consent
Affects: Hugging Face Transformers
Langflow: IBM Langflow OSS 1.0.0 through 1.11.1 could allow a remote attacker to obtain sensitive…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.11.1 could allow a remote attacker to read arbitrary files due…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.11.1 could allow a remote attacker to execute arbitrary flows…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.11.1 could allow a remote authenticated attacker to execute…
Affects: Langflow
vLLM: VLLM up to and including 0.17.0 allows remote attackers to cause a Denial of Service via memory…
Affects: vLLM
n8n: N8n before 1.123.69 (and 2.x before 2.33.4 / 2.34.1) contains a code execution vulnerability in…
Affects: n8n
n8n: N8n before 1.123.69, 2.x before 2.33.4, and 2.x before 2.34.1 contain an allowed-domains bypass…
Affects: n8n
n8n: N8n before 1.123.69, 2.x before 2.33.4, and 2.34.x before 2.34.1 contain an arbitrary file read…
Affects: n8n
n8n: N8n before 2.34.1 and 2.33.4 contains an authorization bypass in the custom project role…
Affects: n8n
n8n: N8n versions before 1.123.69, 2.33.4, and 2.34.1 contain a JavaScript task runner VM sandbox…
Affects: n8n
n8n: N8n before 1.123.69, 2.x before 2.33.4, and 2.34.x before 2.34.1 contain an expression injection…
Affects: n8n
n8n: N8n before 1.123.69, 2.33.4, and 2.34.1 contains a stored cross-site scripting vulnerability in…
Affects: n8n
n8n: N8n before 2.33.4 and 2.34.x before 2.34.1 contain a remote code execution vulnerability in the…
Affects: n8n
Langflow: IBM Langflow OSS 1.0.0 through 1.10.0 could allow a remote attacker to overwrite administrator…
Affects: Langflow
NVIDIA Triton Inference Server: NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause…
Affects: NVIDIA Triton Inference Server
NVIDIA Triton Inference Server: NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause…
Affects: NVIDIA Triton Inference Server
Flowise: Flowise versions before 3.1.3 contain a remote code execution vulnerability in the Custom MCP…
Affects: Flowise
Flowise: Flowise before 3.1.3 contains a code injection vulnerability in the CSV Agent node's…
Affects: Flowise
Flowise: Flowise before 3.1.3 contains a code injection vulnerability in the Airtable Agent node that…
Affects: Flowise
Flowise: Flowise before 3.1.3 contains a sandbox escape vulnerability in pythonCodeValidator.ts that…
Affects: Flowise
Flowise: Flowise NodeVM sandbox escape via puppeteer allowlist - authenticated RCE and arbitrary file…
Affects: Flowise
n8n: N8n before 1.123.67, 2.31.5, and 2.32.1 contains a SQL injection vulnerability in the…
Affects: n8n
n8n: N8n before 2.31.5 and 2.32.x before 2.32.1 contain a path-confinement bypass in the…
Affects: n8n
n8n: N8n before 2.32.1 (and before 2.31.5) is vulnerable to account takeover via the Token Exchange…
Affects: n8n