A vulnerability in pypdf prior to version 6.16.0 allows an attacker to craft a malicious PDF with a cyclic tree structure that causes an infinite loop in the TreeObject.insert_child function. This can lead to denial of service by causing the application to hang. The issue has been fixed in pypdf version 6.16.0. If upgrading is not possible, applying the changes from the referenced pull request is recommended as a workaround.
SiYuan before version 3.7.4 has a vulnerability in 17 block metadata and content endpoints within kernel/api/block.go. These endpoints lack proper authorization checks and publish-access filtering, allowing anonymous users to access private block content and metadata without authentication. This issue affects handlers such as getRefText, checkBlockExist, and getBlockBreadcrumb.
SiYuan versions before 3.7.4 have a cross-site WebSocket hijacking vulnerability in the admin-only /ws/network/proxy endpoint. This endpoint disables origin validation by setting CheckOrigin to always return true, allowing attackers to establish WebSocket connections from malicious webpages. This enables authenticated network pivoting through the victim's machine by proxying arbitrary network traffic.
chi versions before 5.2.2 contain an open redirect vulnerability in the RedirectSlashes middleware. This vulnerability arises because the middleware uses the Host header to construct redirect URLs, allowing attackers to manipulate the Host header to redirect users to arbitrary hosts. This can facilitate phishing attacks and credential theft. The advisory is a duplicate and has been withdrawn in favor of GHSA-vrw8-fxc6-2r93. No patch links are provided in this advisory, but the fixed version is 5.2.2.
### Impact
An attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires reading a file in non-strict mode.
### Patches
This has been fixed in [pypdf==6.9.2](https://github.com/py-pdf/pypdf/releases/tag/6.9.2).
### Workarounds
If users cannot upgrade yet, consider applying the changes from PR [#3693](https://github.com/py-pdf/pypdf/pull/3693).
### Impact
An attacker who uses this vulnerability can craft a PDF which leads to long runtimes. This requires loading a PDF with a large trailer `/Size` value in incremental mode.
### Patches
This has been fixed in [pypdf==6.10.2](https://github.com/py-pdf/pypdf/releases/tag/6.10.2).
### Workarounds
If you cannot upgrade yet, consider applying the changes from PR [#3735](https://github.com/py-pdf/pypdf/pull/3735).
### Summary
Several HTTP transport endpoints in n8n-mcp lacked proper authentication, and the health check endpoint exposed sensitive operational metadata without credentials.
### Impact
An unauthenticated attacker with network access to the n8n-mcp HTTP server could disrupt active MCP sessions and gather information useful for further attacks.
### Patches
Fixed in **v2.47.6**. All MCP session endpoints now require Bearer authentication. The health check endpoint has been reduced to a minimal liveness response.
### Workarounds
If you cannot upgrade immediately:
- **Restrict network access** to the HTTP server using firewall rules, reverse proxy IP allowlists, or a VPN so that only trusted clients can reach it.
- **Use stdio mode** (`MCP_MODE=stdio`) instead of HTTP mode. The stdio transport does not expose any HTTP endpoints and is unaffected by this vulnerability.
Upgrading to v2.47.6 is still strongly recommended.
### Credit
Reported by @yotampe-pluto.
## Impact
`n8n-mcp` versions before 2.50.1 contained three independently-reported issues affecting deployments that run the n8n API integration:
1. **Caller-supplied identifiers were not validated before being used as URL path segments** by the n8n API client. An authenticated MCP caller passing a crafted workflow id could cause outbound requests carrying the configured n8n API key to land on other same-origin endpoints, bypassing handler-level access controls (including `DISABLED_TOOLS`).
2. **Validated webhook, form, and chat trigger URLs followed redirects.** A URL that passed initial validation could redirect the outbound request to a host that would otherwise have been rejected, with the response body returned to the caller. Reachable as non-blind SSRF over authenticated MCP calls.
3. **Mutation telemetry stored unredacted operation payloads.** On instances running with the default opt-in telemetry, partial-update operation diffs were uploaded without redaction. Operation values can carry the same node-parameter values the workflow contains, including bearer tokens, API keys, and webhook secrets.
## Severity
CVSS 8.3 (HIGH). Exploitation requires an authenticated MCP caller and an n8n API integration configured with an n8n API key.
## Patched versions
Upgrade to `n8n-mcp >= 2.50.1`.
## Workarounds
- For issues (1) and (2): restrict network access to the HTTP transport (firewall, reverse-proxy ACL, or VPN) so only trusted callers can reach the MCP HTTP port; or switch to stdio mode, which exposes no HTTP surface for these issues.
- For issue (3): set `N8N_MCP_TELEMETRY_DISABLED=true` in the environment before starting the server, or run `npx n8n-mcp telemetry disable` once.
## Credit
Reported by @cybercraftsolutionsllc.
GitPython versions up to 3.1.53 contain a vulnerability in the Diffable.diff method that allows arbitrary file overwrite via injection of the git diff --output argument. This occurs because the method forwards keyword arguments directly to git diff commands without validating unsafe options. A patch is available to address this issue by adding proper option checks.
A vulnerability in pypdf prior to version 6.15.0 allows an attacker to craft a PDF that causes large memory consumption during parsing of the /ToUnicode entry in fonts. This occurs when unusually large values are present, potentially impacting availability due to resource exhaustion. The issue has been fixed in pypdf version 6.15.0.
A vulnerability in pypdf prior to version 6.15.0 allows an attacker to craft a malicious PDF that causes long runtimes and excessive memory consumption during font width parsing. This issue occurs in the Font._collect_cid_character_widths function when processing fonts with unusually large width values. The vulnerability has a medium severity rating and does not impact confidentiality or integrity but affects availability. It has been fixed in pypdf version 6.15.0. Workarounds include applying the changes from a specific pull request if upgrading is not immediately possible.
The openUrl function in the @a2ui/web_core package allows an agent-controlled URL to be passed directly to window.open() without validating the URI scheme. This enables a malicious agent to supply a javascript: URI via a Button component's functionCall action, causing arbitrary JavaScript execution in the victim application's browser context. This vulnerability represents a stored or reflected cross-site scripting (XSS) issue with medium severity. It affects versions 0.9.0 and later. No non-default configuration is required, as the Basic Catalog is enabled by default. There is no indication of a patch or fix currently available. The advisory is a duplicate and references GHSA-72qq-p3r5-f7wq for the original report.
A vulnerability in tools.jackson.core:jackson-core affects its asynchronous JSON parser's handling of streamed numeric input. The issue is an incomplete fix for a prior CVE, allowing an attacker to bypass the maxNumberLength constraint by streaming JSON numbers in many small chunks without terminators. This causes excessive memory allocation, potentially exhausting JVM heap memory. The flaw impacts versions from 2.15.0 through 2.18.7, 2.19.0 through 2.21.3, 2.22.0, and 3.0.0 through 3.1.3 and 3.2.0. Synchronous parsers and async parsers on complete input are not affected. Exploitation requires only the ability to stream data to a parsing endpoint, with no privileges or user interaction needed.
DOMPurify versions before 3.4.12 have a vulnerability where the afterSanitizeElements hook is not executed for custom elements allowed via CUSTOM_ELEMENT_HANDLING.tagNameCheck. This allows attributes on these custom elements to bypass security policies, potentially enabling second-order cross-site scripting (XSS) attacks by preserving sensitive attributes that are later re-injected into innerHTML sinks.
A vulnerability in pypdf2 prior to version 6.12.2 allows an attacker to craft a malicious PDF that causes large memory usage when extracting text from a page containing a form XObject with self-references. This can lead to resource exhaustion. The issue has a medium severity rating and has been fixed in pypdf version 6.12.2.
A vulnerability in pypdf2 prior to version 6.13.0 allows an attacker to craft a malicious PDF that causes an infinite loop when extracting text in layout mode. This can lead to denial of service due to resource exhaustion. The issue has been fixed in pypdf version 6.13.0. Workarounds include applying changes from a specific pull request if upgrading is not immediately possible.
A vulnerability in pypdf2 prior to version 6.13.0 allows an attacker to craft a malicious PDF that causes an infinite loop when merging a file with outlines. This can lead to denial of service due to resource exhaustion. The issue has been fixed in pypdf version 6.13.0.
A vulnerability in pypdf2 prior to version 6.13.1 allows an attacker to craft a specially designed PDF that causes an infinite loop when merged with a writer. This issue is fixed in pypdf version 6.13.1. Users unable to upgrade immediately can apply changes from a specific pull request as a workaround.
Red Hat has released an important security advisory addressing multiple vulnerabilities in the Linux kernel packages for Red Hat Enterprise Linux 9.6 Extended Update Support. The update fixes several use-after-free vulnerabilities, denial of service issues, and other kernel bugs affecting components such as smc, libceph, netfilter, xfs, memory management, net scheduling, SMB client, RDMA, and wifi mac80211. The advisory also includes bug fixes and performance enhancements. Systems must be rebooted after applying the update for changes to take effect.