Abraxas Labs

n8n before 2.42.6, 2.43.3 and 3.0.1 Code Execution Outside Task Runner Isolation via Deprecated Function Nodes

SQLite before 3.54.0 Authorizer Bypass via RIGHT or FULL JOIN USING

SQLite before 3.54.0 FTS5 Heap Buffer Overflow via fts5MergeRowidLists()

ProFTPD before 1.3.9e and 1.3.10rc5 mod_sftp Copy-File Authorization Bypass

SQLite before 3.54.0 Stack Exhaustion via countOfViewOptimization() in VALUES Clause

Prometheus through 3.15.1 Credential Leak via remote_write Cross-Host Redirects

phpMyAdmin through 5.2.3 SQL Injection via Central Columns col_extra and col_attribute

OpenCart through 4.1.0.4 Payment Bypass via Free Checkout Reward Points

Moodle through 5.3.0, 5.2.4, 5.1.8, 5.0.11 and 4.5.15 SQL Injection via enrol_database Course idnumber

Jellyfin through 12.4 Information Disclosure via GET /Playlists/{playlistId}