漏洞公告

Gitea: Authorization Bypass via "Allow edits from maintainers" allows unauthorized commits to any readable repo

Gitea: OAuth2 access token scope enforcement bypass via HTTP Basic authentication

Gogs: Overwriting critical files results in a denial of service

Rclone: Unauthenticated command execution in `rclone rcd --rc-serve` via inline remote instantiation, bypassing CVE-2026-41179 fix

@nuxt/webpack-builder and @nuxt/rspack-builder dev server same-origin check bypassed when Sec-Fetch-Site, Origin, and Referer are all absent (incomplete fix for GHSA-6m52-m754-pw2g)

Cross-site scripting via <NoScript> slot content in Nuxt's head components

LiteLLM: Authentication Bypass via Host Header Injection

Gitea: Git Smart HTTP Skips Repository Token Scopes for Bearer Tokens

n8n: SecurityScorecard Node Leaks API Token to User-Controlled Host

n8n: MCP Browser HTTP Transport Exposes Unauthenticated Browser-Control Sessions

n8n: Cross-Tenant Credential Takeover via Dynamic Credentials EE Endpoints

n8n: Credential Exfiltration via Permission Bypass

n8n: Denial of Service via ZIP decompression in webhook workflow

n8n: Public API Execution Retry Authorization Bypass

n8n: Python Code Node AST Validator Bypass

n8n: Stored XSS in Chat Trigger Node

n8n: Reflected XSS via Facebook, WhatsApp, and Microsoft Teams Trigger Webhook Verification Endpoints

n8n: Microsoft SQL Node Prototype Pollution

yt-dlp: Arbitrary command injection possible if --exec option used with yt-dlp

OpenStack Nova: Nova scheduler hint injection bypasses Placement resource claims and scheduling constraints

Duplicate Advisory: Host environment sanitizer missed two Node.js control variables

Duplicate Advisory: Shell inline-command parsing could miss an allowlist check

Duplicate Advisory: Bootstrap token replay could widen pending pairing scopes