Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High8.4Renovate before 44.79.0 SSRF via HTTP Preset URLs and customDatasourcesEPSS 0.2%Oct 14, 2026
- Critical9.0Renovate before 44.60.1 contains an allowlist bypass vulnerability that allows repositories to set restricted environment variables by placing env inside a shared preset.EPSS 0.2%Oct 14, 2026
- Medium5.3Renovate before 44.61.3 minimumReleaseAge Bypass via PR Rebase RequestEPSS 0.2%Oct 14, 2026
- High7.1Renovate before 44.60.1 HTTP Header Allowlist Bypass via Shared PresetsEPSS 0.2%Oct 14, 2026
- Critical9.1Better Auth 1.5.0-beta.12 before 1.7.7 Authentication Bypass via OAuth ProxyEPSS 0.3%Oct 14, 2026
- High8.6Better Auth @better-auth/sso before 1.7.3 Authentication Bypass via Personal SSO ProvidersEPSS 0.3%Oct 14, 2026
- Critical9.3Better Auth 1.4.0-beta.18 before 1.7.7 Authentication Bypass via Magic LinkEPSS 0.3%Oct 14, 2026
- Medium6.3Better Auth drizzle-adapter 1.6.17 before 1.7.7 Rate Limit Bypass via Race ConditionEPSS 0.2%Oct 14, 2026
- Medium6.9GitPython 3.1.62 before 3.2.0 Symlink Path Traversal via Submodule.move()EPSS 0.1%Oct 14, 2026
- High8.7GitPython before 3.2.0 Arbitrary File Read via Head.checkout() Branch NameEPSS 0.3%Oct 14, 2026
- Critical9.2GitPython 3.1.30 before 3.2.0 Command Injection via Remote.pull() RefspecEPSS 0.5%Oct 14, 2026
- High7.7GitPython before 3.2.0 Command Execution via ls_remote ext:: URLsEPSS 0.4%Oct 14, 2026
- High8.7GitPython before 3.2.0 ReDoS via _re_actor_epoch in parse_actor_and_dateEPSS 0.3%Oct 14, 2026
- High7.1GitPython before 3.2.0 Environment Variable Disclosure via .gitmodules Submodule NameEPSS 0.2%Oct 14, 2026
- High8.2Parse Server before 8.6.97 and 9.0.0 before 9.10.2-alpha.6 does not handle errors raised while sending verification or password reset emails, causing the server process to exit.EPSS 0.3%Oct 14, 2026
- High7.1n8n before 1.123.83 Authorization Bypass via Execute Sub-workflow Inline JSONEPSS 0.2%Oct 14, 2026
- Medium6.3n8n before 1.123.83, 2.41.4, and 2.42.1 Unauthenticated Workflow Execution via Dynamic-Path Webhook ResolutionEPSS 0.4%Oct 14, 2026
- Medium6.1n8n before 2.41.4 and 2.42.1 Cross-Project Agent Ownership Transfer via Agents Create EndpointEPSS 0.2%Oct 14, 2026
- High7.2n8n before 2.41.4 and 2.42.1 Credential Check Bypass via Agent Node ParametersEPSS 0.2%Oct 14, 2026
- High7.2n8n before 1.123.83, 2.41.4, and 2.42.1 Stored XSS via Binary-Data File PreviewEPSS 0.2%Oct 14, 2026
- Medium6.0n8n before 1.123.83, 2.41.4, and 2.42.1 Prototype Pollution via AI Workflow Builder Connection MergeEPSS 0.3%Oct 14, 2026
- High7.0n8n before 1.123.83, 2.41.4, and 2.42.1 Stored XSS via Chat Trigger customCss ParameterEPSS 0.4%Oct 14, 2026
- High7.0n8n before 2.41.4 and 2.42.1 Send-and-Wait HMAC Signature Bypass via Waiting-WebhookEPSS 0.5%Oct 14, 2026
- High7.7n8n before 1.123.83, 2.41.4, and 2.42.1 Code Execution via Git Node Log OperationEPSS 0.3%Oct 14, 2026
- High7.2n8n before 1.123.83 Credential Authorization Bypass via Nested Inline Sub-WorkflowsEPSS 0.3%Oct 14, 2026