@stackflag.bsky.socialCVE-2026-44790 - n8n
An attacker with permission to create workflows in n8n can read sensitive files on the server. This could lead to a full server compromise if left unaddressed. To fix this,…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2025-25200 - koa
A bug in Koa's header parsing can cause a Denial-of-Service attack if an attacker sends malicious HTTP headers. This affects versions prior to 0.21.2, 1.7.1, 2.15.4, and…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2023-37466 - vm2
vm2, a Node.js library, has critical security issues that could let hackers run unauthorized code. This could happen if you're using an outdated version of vm2. Update to version…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2026-22709 - vm2
An attacker can escape the sandbox and run arbitrary code on a server running an out-of-date version of vm2 for Node.js. This could allow unauthorized access or data theft. Update to…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2023-37903 - vm2
A vulnerability in the Node.js vm2 sandbox allows attackers to break out of the sandbox and run malicious code. This could give an attacker complete control over your system. There…
Too many irrelevant or confusing CVEs? Use stackflag.com