n8n: N8n before 1.123.67, 2.31.5, and 2.32.1 contains a prototype pollution vulnerability in the VM…
Affects: n8n
Advisories
Security advisories for popular AI software, newest first, each linked to its public source.
331 advisories rated High
n8n: N8n versions before 2.32.1 contain a server-side request forgery protection bypass vulnerability…
Affects: n8n
n8n: N8n before 1.123.67, 2.x before 2.31.5, and 2.32.x before 2.32.1 contain a remote code execution…
Affects: n8n
n8n: N8n before 1.123.67, 2.x before 2.31.5, and 2.32.x before 2.32.1 contain a type confusion…
Affects: n8n
n8n: N8n's JavaScript task runner shared a single module cache across all users' Code-node executions
Affects: n8n
n8n: N8n versions before 1.123.67, 2.31.5, and 2.32.1 contain an arbitrary file write vulnerability…
Affects: n8n
n8n: N8n before 1.123.67, 2.31.5, and 2.32.1 contains a SQL injection vulnerability in the Snowflake…
Affects: n8n
Flowise: Flowise versions 2.2.4 through 3.1.4 contain a missing authorization vulnerability in the POST…
Affects: Flowise
Flowise: Flowise through 3.1.4 contains a server-side request forgery vulnerability in the SSRF guard…
Affects: Flowise
llama.cpp: Llama.cpp builds b1886 through b7445 contain a race condition use-after-free vulnerability in…
Affects: llama.cpp
llama.cpp: Llama.cpp builds b1886 through b7445 contain an integer overflow vulnerability in the…
Affects: llama.cpp
Flowise: Flowise through 3.1.4 contains an authentication bypass vulnerability that allows…
Affects: Flowise
Flowise: Flowise through 3.1.4 contains a missing authorization vulnerability that allows authenticated…
Affects: Flowise
llama.cpp: Llama.cpp builds b7492 through the latest b9060 contains a use-after-free vulnerability in…
Affects: llama.cpp
llama.cpp: Llama.cpp builds b7492 through the latest b9060 contains a use-after-free vulnerability in the…
Affects: llama.cpp
llama.cpp: Llama.cpp builds b4882 through b9058 contain a heap buffer overflow vulnerability in the KV…
Affects: llama.cpp
llama.cpp: Llama.cpp builds b3978 through b9058 contain an integer underflow and out-of-bounds read…
Affects: llama.cpp
llama.cpp: Llama.cpp builds b1283 through b9058 contain an integer overflow vulnerability in the…
Affects: llama.cpp
llama.cpp: Llama.cpp builds b1886 through b7445 contain a double free vulnerability in the LLaMA-Android…
Affects: llama.cpp
Langflow: IBM Langflow OSS 1.0.0 through 1.10.3 could allow an authenticated attacker to execute arbitrary…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.10.3 could allow an authenticated attacker to execute…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.10.3 contain an authorization bypass vulnerability in the…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote attacker to inject arbitrary code on…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.10.3 installations allow anyone on the internet to execute…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote authenticated attacker to execute…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote authenticated attacker to execute…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.10.3 does not properly validate ownership in the deprecated…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.10.3, and 1.0.0 through 1.10.3 contains a Server-Side Request…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.10.3 Langflow allows remote authenticated attackers to bypass…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.10.3 contain an authentication bypass vulnerability in the…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote attacker to execute arbitrary code…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.10.3 Langflow could allow an authenticated attacker to read…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote authenticated attacker to execute…
Affects: Langflow
MLflow: MLflow AI Gateway permits SSRF through an unvalidated api_base
Affects: MLflow
Open WebUI: A folder write-collaborator can permanently delete the owner's chats by deleting a shared…
Affects: Open WebUI
Open WebUI: Any authenticated user can reach internal services and cloud metadata via NAT64-encoded URLs
Affects: Open WebUI
Open WebUI: Account takeover via OAuth token exchange accepting tokens issued to any client
Affects: Open WebUI
Open WebUI: SSRF into internal services via unvalidated sub-resource requests in the Playwright web loader
Affects: Open WebUI
Flowise: Broken Access Control in Stripe Subscription Endpoints Allows Cross-Tenant Billing Manipulation
Affects: Flowise
Flowise: Cross-Workspace OAuth2 Credential Metadata Leak
Affects: Flowise
Flowise: Information Disclosure in GET /api/v1/upsert-history returns the entire server-wide upsert…
Affects: Flowise
Flowise: Cross-workspace credential IDOR in openai-assistants-vector-store
Affects: Flowise
NVIDIA Triton Inference Server: NVIDIA Triton Inference Server for Linux contains a vulnerability where a user could cause files…
Affects: NVIDIA Triton Inference Server
Flowise: Authenticated arbitrary file write in the `S3 Directory` document loader via unsanitized S3…
Affects: Flowise
Flowise: `DELETE /api/v1/chatflows/:id` does not validate resource type, allowing `agentflows:delete` and…
Affects: Flowise
Flowise: Flowise RCE via SQLite Record Manager Node
Affects: Flowise
Flowise: SSRF Protection Bypass via IPv4-Mapped IPv6 Addresses
Affects: Flowise