Threats Tagged 'ghsa-4x7w-pwq5-598q'
View all threats tagged with 'ghsa-4x7w-pwq5-598q'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'ghsa-4x7w-pwq5-598q'
Click on any threat for detailed analysis and mitigation recommendations
CVE-2026-77069: Server-Side Request Forgery (SSRF) in n8n-io n8nCVE-2026-77069 0 n8n before 1.123.69, 2.33.4, and 2.34.1 contains an SSRF protection bypass in the OAuth2 credential authorization-code-to-access-token exchange. While OAuth2 discovery and dynamic-client-registration requests use n8n's SSRF-protected HTTP client, the token exchange uses a separate client with no SSRF guard. A user with credential-creation permissions can set the access-token URL to an internal address and complete the OAuth2 flow, causing n8n to send a fixed-shape token-exchange POST to that target and reflect its response body back to the attacker (limited to what the target returns to this specific request). Join the discussion | CVE Database V5 | 08/20/2026, 11:21:05 UTC Added: 08/20/2026, 11:37:42 UTC |
Showing 1 to 1 of 1 result