Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High7.7n8n before 2.41.4 and 2.42.x before 2.42.1 contains a prototype pollution vulnerability in the MCP workflow-validation tool, whose interpreter evaluates caller-supplie…Oct 14, 2026
- Medium6.0n8n before 1.123.83, 2.41.4, and 2.42.1 Prototype Pollution via AI Workflow Builder Connection MergeOct 14, 2026
- Critical9.3Perforce Helix Authentication Service (HAS) deployments that retain the shipped default SCIM bearer token are vulnerable to unauthorized access when the SCIM endpoint…EPSS 0.5%Oct 13, 2026
- High8.8dot-access through 1.0.0 contains a prototype pollution vulnerability that allows attackers to modify Object.prototype by supplying a crafted dotted path to set().EPSS 0.3%Oct 8, 2026
- High8.1Payload is a free and open source headless content management system.EPSS 0.5%Oct 6, 2026
- Critical10.0Payload is a free and open source headless content management system.EPSS 0.4%Oct 6, 2026
- Medium6.9A vulnerability was determined in jQWidgets up to 24.0.1.EPSS 0.6%Aug 24, 2026
- Critical9.3exceljs through 4.4.0 contains a prototype pollution vulnerability in the deepMerge helper that fails to reject __proto__, constructor, or prototype keys when merging note objects.EPSS 0.6%Aug 24, 2026
- High8.6Adobe Acrobat and Reader Prototype Pollution VulnerabilityKEVEPSS 2.2%Apr 11, 2026
- Medium6.5The _.unset and _.omit functions in Lodash are vulnerable to prototype pollution.Mar 31, 2026
- Medium6.9The _.unset and _.omit functions in Lodash are vulnerable to prototype pollution.Jan 21, 2026
- Critical9.1Elysia is a Typescript framework for request validation, type inference, OpenAPI documentation and client-server communication.EPSS 0.6%Dec 9, 2025
12 records · page 1 of 1
PreviousNext