https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-02T15:37:48.030476+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/fkie_cve-2026-103256 fkie_cve-2026-103256 2026-10-02T15:37:48.033682+00:00

n8n versions before 2.39.6 and 2.40.0 before 2.40.1 contain a credentials leak vulnerability in the Wekan and Baserow username-and-password credentials that sends unencrypted passwords to unvalidated hosts. Attackers with credential update permissions can modify the host field to receive account passwords at arbitrary hosts, bypassing domain validation controls.

 https://vulnerability.circl.lu/vuln/ghsa-6m32-557f-fqq9 GHSA-6m32-557f-fqq9 2026-10-02T15:37:48.033783+00:00

n8n versions before 2.39.6 and 2.40.0 before 2.40.1 contain a credentials leak vulnerability in the Wekan and Baserow username-and-password credentials that sends unencrypted passwords to unvalidated hosts. Attackers with credential update permissions can modify the host field to receive account passwords at arbitrary hosts, bypassing domain validation controls.