CVE ID :CVE-2026-110843 Published : Oct. 14, 2026, 11:17 p.m. | 15 minutes ago Description :n8n before 2.41.4 and 2.42.x before 2.42.1 contains an uncontrolled resource consumption vulnerability in the unauthenticated OAuth authorize endpoint, which resolves clients by URL path but stores the...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-110843 - n8n before 2.41.4 and 2.42.1 Unauthenticated Unbounded OAuth Client Persistence via Authorize Endpoint

VERWANDTEARTIKEL

CVE-2026-110872 - Nodemailer 3.0.0 before 10.0.10 Denial of Service via SMTP Reply Parsing

CVE-2026-110867 - Renovate before 44.60.1 allowedEnv Allowlist Bypass via Shared Preset

CVE-2026-110868 - Renovate before 44.79.0 SSRF via HTTP Preset URLs and customDatasources

CVE-2026-110869 - Nodemailer 3.0.0 before 10.0.13 ReDoS via SMTP AUTH Mechanism Detection Regexes

CVE-2026-110858 - GitPython 3.1.30 before 3.2.0 Command Injection via Remote.pull() Refspec

CVE-2026-110859 - GitPython before 3.2.0 Arbitrary File Read via Head.checkout() Branch Name