https://blog.securelayer7.net/januscape-linux-kvm-vulnerability/ SecureLayer7 en 2026-07-24T07:42:24.000Z Januscape: A 16-Year-Old Field-Comparison Bug in the Linux KVM Shadow MMU CVE Advisory https://securelayer7.net/lab/authjs-email-homoglyph-unicode-at-bypass-account-takeover SecureLayer7 en 2026-07-23T14:48:57.279Z Auth.js (@auth/core): Email Magic-Link Homoglyph Bypass Leading to Account Takeover Security Research https://securelayer7.net/lab/better-auth-pre-account-hijacking-magic-link-email-otp SecureLayer7 en 2026-07-24T15:51:27.065Z better-auth Pre-Account Hijacking via Magic-Link and Email-OTP Sign-In Security Research https://securelayer7.net/lab/better-auth-stripe-cross-org-billing-authorization-bypass SecureLayer7 en 2026-07-24T16:09:36.519Z @better-auth/stripe: Cross-Organization Billing Authorization Bypass Security Research https://securelayer7.net/lab/cve-2024-7708-eclipse-jetty-100-continue-buffer-leak-dos SecureLayer7 en 2026-07-22T23:10:34.755Z CVE-2024-7708: Eclipse Jetty jetty-server Buffer Leak DoS via 100-Continue Requests CVE Advisory https://securelayer7.net/lab/cve-2025-65964-n8n-git-node-hooks-rce SecureLayer7 en 2026-07-22T22:24:08.424Z CVE-2025-65964: n8n Git Node Remote Code Execution via core.hooksPath Security Research https://securelayer7.net/lab/cve-2026-10050-jetty-digest-auth-iso8859-bypass SecureLayer7 en 2026-07-22T23:11:20.401Z CVE-2026-10050: Eclipse Jetty Digest Authentication Bypass via ISO-8859-1 Encoding Collision CVE Advisory https://securelayer7.net/lab/cve-2026-15074-fastify-static-route-guard-bypass-dot-dot-path-traversal SecureLayer7 en 2026-07-24T16:49:43.911Z CVE-2026-15074: @fastify/static Route Guard Bypass via Dot-Dot Path Traversal CVE Advisory https://securelayer7.net/lab/cve-2026-25800-quinn-proto-assembler-memory-exhaustion SecureLayer7 en 2026-07-24T14:15:06.684Z CVE-2026-25800: quinn-proto Unbounded Stream Reassembly Memory Exhaustion Security Research https://securelayer7.net/lab/cve-2026-45623-postcss-sourcemappingurl-arbitrary-file-read SecureLayer7 en 2026-07-23T15:08:12.038Z CVE-2026-45623: PostCSS Arbitrary File Read via sourceMappingURL Path Traversal CVE Advisory https://securelayer7.net/lab/cve-2026-47219-find-my-way-http2-prototype-dos SecureLayer7 en 2026-07-23T19:48:58.909Z CVE-2026-47219: find-my-way Prototype Property Lookup DoS via HTTP/2 Method CVE Advisory https://securelayer7.net/lab/cve-2026-54673-builder-util-runtime-redirect-credential-leak SecureLayer7 en 2026-07-24T14:11:32.726Z CVE-2026-54673: builder-util-runtime Cross-Origin Redirect Credential Leak CVE Advisory https://securelayer7.net/lab/cve-2026-55575-liquidjs-pop-filter-memorylimit-bypass SecureLayer7 en 2026-07-24T14:10:07.235Z CVE-2026-55575: LiquidJS pop Filter memoryLimit Accounting Bypass CVE Advisory https://securelayer7.net/lab/cve-2026-55607-claude-code-git-worktree-sandbox-escape SecureLayer7 en 2026-07-24T17:05:05.510Z CVE-2026-55607: @anthropic-ai/claude-code Sandbox Escape via Git Worktree Path Confusion CVE Advisory https://securelayer7.net/lab/cve-2026-55685-react-router-manifest-dos-route-matching SecureLayer7 en 2026-07-24T14:09:01.865Z CVE-2026-55685: react-router Unauthenticated DoS via Inefficient Route Matching on Manifest Endpoint CVE Advisory https://securelayer7.net/lab/cve-2026-55831-netty-spdy-settings-unbounded-map-dos SecureLayer7 en 2026-07-22T21:29:57.115Z CVE-2026-55831: netty-codec-http SPDY SETTINGS Frame Unbounded Entry Count DoS CVE Advisory https://securelayer7.net/lab/cve-2026-55833-netty-spdy-zlib-decompression-bomb-dos SecureLayer7 en 2026-07-22T21:29:10.937Z CVE-2026-55833: netty-codec-http SPDY zlib Decompression Bomb (DoS) CVE Advisory https://securelayer7.net/lab/cve-2026-56745-netty-spdy-bytebuf-reference-leak-memory-exhaustion SecureLayer7 en 2026-07-22T22:50:18.138Z CVE-2026-56745: netty-codec-http SpdyHttpDecoder ByteBuf Reference Leak CVE Advisory https://securelayer7.net/lab/cve-2026-56816-netty-codec-http3-reserved-frame-memory-exhaustion SecureLayer7 en 2026-07-22T21:49:54.870Z CVE-2026-56816: netty-codec-http3 Memory Exhaustion via Reserved Frame Types CVE Advisory https://securelayer7.net/lab/cve-2026-56817-netty-codec-xml-xxe-xmldecoder SecureLayer7 en 2026-07-22T21:49:22.841Z CVE-2026-56817: netty-codec-xml XmlDecoder XML External Entity Injection CVE Advisory https://securelayer7.net/lab/cve-2026-56820-netty-ocsp-certid-replay-bypass SecureLayer7 en 2026-07-22T21:48:50.974Z CVE-2026-56820: Netty OcspClient OCSP Response Replay Attack CVE Advisory https://securelayer7.net/lab/cve-2026-56821-netty-ocsp-revocation-bypass-stale-response SecureLayer7 en 2026-07-22T21:48:09.376Z CVE-2026-56821: netty-handler-ssl-ocsp Stale OCSP Response Accepted as Valid CVE Advisory https://securelayer7.net/lab/cve-2026-56822-netty-ocsp-toctou-race-condition SecureLayer7 en 2026-07-22T22:49:29.532Z CVE-2026-56822: netty-handler-ssl-ocsp TOCTOU Race in OcspServerCertificateValidator CVE Advisory https://securelayer7.net/lab/cve-2026-57516-ray-read-webdataset-pickle-rce SecureLayer7 en 2026-07-24T15:54:59.540Z CVE-2026-57516: Ray read_webdataset Arbitrary Code Execution via Default Pickle Decoder CVE Advisory https://securelayer7.net/lab/cve-2026-59206-n8n-prototype-pollution-workflow-credentials SecureLayer7 en 2026-07-22T22:30:23.208Z CVE-2026-59206: n8n Prototype Pollution via Workflow Credentials CVE Advisory https://securelayer7.net/lab/cve-2026-59207-n8n-agents-mcp-domain-restriction-bypass SecureLayer7 en 2026-07-22T22:29:40.928Z CVE-2026-59207: n8n AI Agents MCP Connector Allowed HTTP Request Domains Bypass CVE Advisory https://securelayer7.net/lab/cve-2026-59208-n8n-cross-issuer-jwt-account-takeover SecureLayer7 en 2026-07-22T22:29:02.518Z CVE-2026-59208: n8n Cross-Issuer JWT Token Exchange Account Takeover CVE Advisory https://securelayer7.net/lab/cve-2026-59209-n8n-credential-header-leak-pagination-expression SecureLayer7 en 2026-07-22T22:31:04.835Z CVE-2026-59209: n8n Shared Credential Header Leak via HTTP Request Pagination Expression CVE Advisory https://securelayer7.net/lab/cve-2026-59214-open-webui-pyodide-same-origin-xss-rce SecureLayer7 en 2026-07-24T17:03:31.287Z CVE-2026-59214: Open WebUI Stored Web-Worker XSS via Pyodide Same-Origin Code Execution CVE Advisory https://securelayer7.net/lab/cve-2026-59216-open-webui-cross-user-socketio-session-hijack-rce SecureLayer7 en 2026-07-24T17:14:48.818Z CVE-2026-59216: Open WebUI Cross-User Code Execution via Unvalidated Socket.IO session_id CVE Advisory https://securelayer7.net/lab/cve-2026-59219-open-webui-jwt-revocation-bypass-socketio-websocket SecureLayer7 en 2026-07-24T17:02:15.874Z CVE-2026-59219: Open WebUI Insufficient Session Expiration on Realtime Endpoints CVE Advisory https://securelayer7.net/lab/cve-2026-59714-open-webui-cross-channel-message-overwrite SecureLayer7 en 2026-07-24T17:09:57.767Z CVE-2026-59714: open-webui Cross-Channel Message Overwrite via Chat Completion API CVE Advisory https://securelayer7.net/lab/cve-2026-59859-kiota-php-code-injection-dollar-interpolation SecureLayer7 en 2026-07-24T16:03:16.945Z CVE-2026-59859: Microsoft.OpenApi.Kiota PHP Code Generation Literal Injection CVE Advisory https://securelayer7.net/lab/cve-2026-59860-kiota-xml-doccomment-newline-code-injection SecureLayer7 en 2026-07-24T16:11:48.872Z CVE-2026-59860: Microsoft.OpenApi.Kiota XML Doc-Comment Newline Breakout Code Injection CVE Advisory https://securelayer7.net/lab/cve-2026-59862-kiota-python-generator-enum-description-code-injection SecureLayer7 en 2026-07-24T16:04:35.490Z CVE-2026-59862: Microsoft Kiota Python Generator Code Injection via Enum Description CVE Advisory https://securelayer7.net/lab/cve-2026-59863-kiota-workspace-outputpath-path-traversal SecureLayer7 en 2026-07-24T16:44:17.915Z CVE-2026-59863: Microsoft Kiota workspace.json Path Traversal to Arbitrary File Write CVE Advisory https://securelayer7.net/lab/cve-2026-59864-kiota-plugin-static-template-path-traversal SecureLayer7 en 2026-07-24T16:01:49.195Z CVE-2026-59864: Microsoft.OpenApi.Kiota Path Traversal via x-ai-* OpenAPI Extensions CVE Advisory https://securelayer7.net/lab/cve-2026-59865-kiota-command-injection-dependency-install-command SecureLayer7 en 2026-07-24T16:38:12.237Z CVE-2026-59865: Microsoft Kiota Command Injection via x-ms-kiota-info dependencyInstallCommand CVE Advisory https://securelayer7.net/lab/cve-2026-59866-kiota-x-ms-kiota-info-path-traversal-code-injection SecureLayer7 en 2026-07-24T16:43:02.764Z CVE-2026-59866: Microsoft Kiota Arbitrary File Write and Code Injection via x-ms-kiota-info CVE Advisory https://securelayer7.net/lab/cve-2026-59867-kiota-openapi-ref-ssrf-lfi-rfi SecureLayer7 en 2026-07-24T17:24:09.750Z CVE-2026-59867: Microsoft Kiota SSRF and Local File Inclusion via Unrestricted OpenAPI $ref Resolution CVE Advisory https://securelayer7.net/lab/cve-2026-59901-netty-bzip2decoder-infinite-loop-dos SecureLayer7 en 2026-07-22T22:48:52.326Z CVE-2026-59901: Netty Bzip2Decoder Infinite Loop DoS CVE Advisory https://securelayer7.net/lab/cve-2026-59931-phpspreadsheet-webservice-ssrf-redirect-bypass SecureLayer7 en 2026-07-23T15:10:14.158Z CVE-2026-59931: PHPSpreadsheet SSRF Whitelist Bypass via HTTP Redirect in WEBSERVICE() CVE Advisory https://securelayer7.net/lab/cve-2026-59932-phpspreadsheet-gnumeric-gzip-bomb-dos SecureLayer7 en 2026-07-23T15:09:39.960Z CVE-2026-59932: PHPSpreadsheet Gnumeric Reader Gzip Bomb (DoS) CVE Advisory https://securelayer7.net/lab/cve-2026-59933-phpspreadsheet-ole-sector-chain-infinite-loop-dos SecureLayer7 en 2026-07-23T15:08:55.657Z CVE-2026-59933: PHPSpreadsheet OLE Sector-Chain Infinite Loop (DoS) CVE Advisory https://securelayer7.net/lab/cve-2026-59935-pypdf-infinite-loop-ascii85-asciihex-inline-image SecureLayer7 en 2026-07-23T16:48:07.924Z CVE-2026-59935: pypdf Infinite Loop via Unterminated ASCII85/ASCIIHex Inline Image CVE Advisory https://securelayer7.net/lab/cve-2026-59936-pypdf-infinite-loop-inline-image SecureLayer7 en 2026-07-23T16:48:46.288Z CVE-2026-59936: pypdf Infinite Loop via Unterminated Inline Image CVE Advisory https://securelayer7.net/lab/cve-2026-59939-httplib2-decompression-bomb-dos SecureLayer7 en 2026-07-24T15:29:12.786Z CVE-2026-59939: httplib2 Decompression Bomb Denial of Service CVE Advisory https://securelayer7.net/lab/cve-2026-59940-seroval-fromjson-promise-resolver-type-confusion SecureLayer7 en 2026-07-24T17:22:54.461Z CVE-2026-59940: seroval fromJSON() Promise Resolver Type Confusion CVE Advisory https://securelayer7.net/lab/cve-2026-64642-nextjs-turbopack-i18n-middleware-bypass SecureLayer7 en 2026-07-22T23:14:59.347Z CVE-2026-64642: Next.js Middleware Bypass via Turbopack Single-Locale i18n CVE Advisory https://securelayer7.net/lab/cve-2026-64645-nextjs-ssrf-rewrite-destination-hostname SecureLayer7 en 2026-07-22T23:08:15.228Z CVE-2026-64645: Next.js Server-Side Request Forgery via Rewrite Destination Hostname CVE Advisory https://securelayer7.net/lab/cve-2026-65015-n8n-ai-agent-project-viewer-privilege-escalation-run-node-tool SecureLayer7 en 2026-07-22T18:10:09.705Z CVE-2026-65015: n8n AI Agent Project Viewer Privilege Escalation via run_node_tool CVE Advisory https://securelayer7.net/lab/cve-2026-65015-n8n-ai-agent-viewer-privilege-escalation-run-node-tool SecureLayer7 en 2026-07-22T18:30:14.719Z CVE-2026-65015: n8n AI Agent Project Viewer Privilege Escalation via run_node_tool Security Research https://securelayer7.net/lab/cve-2026-65016-n8n-sso-instance-role-privilege-escalation SecureLayer7 en 2026-07-22T22:25:28.552Z CVE-2026-65016: n8n SSO Instance-Role Provisioning Privilege Escalation to Owner CVE Advisory https://securelayer7.net/lab/cve-2026-65016-n8n-sso-instance-role-privilege-escalation-1 SecureLayer7 en 2026-07-22T22:50:53.489Z CVE-2026-65016: n8n SSO Instance-Role Provisioning Privilege Escalation to Instance Owner Security Research https://securelayer7.net/lab/cve-2026-65592-n8n-stored-dom-xss-cachedresulturl SecureLayer7 en 2026-07-22T18:08:02.792Z CVE-2026-65592: n8n Stored DOM XSS via Resource Locator cachedResultUrl CVE Advisory https://securelayer7.net/lab/cve-2026-65595-n8n-token-exchange-privilege-escalation SecureLayer7 en 2026-07-22T22:11:50.816Z CVE-2026-65595: n8n Token Exchange Privilege Escalation via Full API Scope Assignment CVE Advisory https://securelayer7.net/lab/cve-2026-65597-n8n-dom-xss-iframe-srcdoc-html-preview SecureLayer7 en 2026-07-22T18:08:40.606Z CVE-2026-65597: n8n DOM-Based XSS via Unsandboxed iframe srcdoc in HTML Preview CVE Advisory https://securelayer7.net/lab/cve-2026-65597-n8n-dom-xss-iframe-srcdoc-html-preview-1 SecureLayer7 en 2026-07-22T18:28:50.866Z CVE-2026-65597: n8n DOM-Based XSS via Unsandboxed iframe srcdoc in HTML Preview Security Research https://securelayer7.net/lab/cve-2026-65598-n8n-git-clone-toctou-race-condition-rce SecureLayer7 en 2026-07-22T18:09:33.937Z CVE-2026-65598: n8n Git Clone Node TOCTOU Race Condition RCE CVE Advisory https://securelayer7.net/lab/cve-2026-65598-n8n-git-clone-toctou-race-condition-rce-1 SecureLayer7 en 2026-07-22T18:28:16.742Z CVE-2026-65598: n8n Git Clone Node TOCTOU Race Condition RCE Security Research https://securelayer7.net/lab/gitpython-clone-template-hook-rce SecureLayer7 en 2026-07-24T17:16:00.550Z GitPython: OS Command Injection via --template in clone_from Security Research https://securelayer7.net/lab/gitpython-config-section-name-injection-sshcommand-rce SecureLayer7 en 2026-07-24T16:31:08.721Z GitPython: git-config section-name injection leads to core.sshCommand RCE Security Research https://securelayer7.net/lab/gitpython-diffable-diff-argument-injection-file-overwrite SecureLayer7 en 2026-07-24T17:21:33.200Z GitPython Argument Injection via Diffable.diff Enables Arbitrary File Overwrite Security Research https://securelayer7.net/lab/gitpython-kwarg-value-token-smuggling-os-command-injection SecureLayer7 en 2026-07-24T16:50:55.764Z GitPython: OS Command Injection via Single-Character Kwarg Value Token Smuggling Security Research https://securelayer7.net/lab/js-yaml-exponential-dos-nested-flow-collections SecureLayer7 en 2026-07-24T16:57:18.901Z js-yaml: Exponential Parsing DoS via Nested Flow Collections Security Research https://securelayer7.net/lab/jupyterlab-image-viewer-svg-xss-new-tab SecureLayer7 en 2026-07-22T23:28:52.421Z JupyterLab Image Viewer Stored XSS via Malicious SVG File Security Research https://securelayer7.net/lab/kin-openapi-validation-handler-fail-open-auth-bypass SecureLayer7 en 2026-07-24T16:56:14.289Z kin-openapi: ValidationHandler Fail-Open Authentication Bypass Security Research https://securelayer7.net/lab/n8n-allowed-http-domains-bypass-ai-llm-nodes SecureLayer7 en 2026-07-22T22:08:58.088Z n8n: Bypass Allowed HTTP Request Domains in AI and LLM Nodes Security Research https://securelayer7.net/lab/n8n-edit-fields-set-node-prototype-pollution-dos SecureLayer7 en 2026-07-22T22:14:16.840Z n8n Edit Fields (Set) Node Prototype Pollution Denial of Service Security Research https://securelayer7.net/lab/n8n-edit-image-format-injection-arbitrary-file-write SecureLayer7 en 2026-07-22T22:14:53.181Z n8n Edit Image Node Format Injection Allows Arbitrary File Write Security Research https://securelayer7.net/lab/n8n-embed-login-unverified-email-claim-account-takeover SecureLayer7 en 2026-07-22T22:09:41.701Z n8n: Account Takeover via Unverified Email Claim in Embed Login Token Exchange Security Research https://securelayer7.net/lab/n8n-git-node-fetch-pull-pushtags-path-traversal-sandbox-bypass SecureLayer7 en 2026-07-22T22:24:51.510Z n8n Git Node fetch/pull/pushTags Operations Bypass Sandbox Path Restriction Security Research https://securelayer7.net/lab/n8n-shared-workflow-inline-subworkflow-credential-bypass SecureLayer7 en 2026-07-22T22:21:27.876Z n8n: Shared-Workflow Editor Credential Bypass via Inline Sub-Workflow JSON Security Research https://securelayer7.net/lab/netty-codec-xml-xmlframedecoder-cpu-exhaustion-dos SecureLayer7 en 2026-07-24T16:55:04.264Z netty-codec-xml XmlFrameDecoder Denial of Service via CPU Exhaustion Security Research https://securelayer7.net/lab/postcss-sourcemappingurl-path-traversal-map-file-disclosure SecureLayer7 en 2026-07-24T16:28:37.488Z PostCSS Path Traversal via sourceMappingURL Leads to Arbitrary .map File Disclosure Security Research https://securelayer7.net/lab/prompty-core-nunjucks-ssti-rce-constructor-prototype SecureLayer7 en 2026-07-24T16:29:50.037Z @prompty/core Server-Side Template Injection to Remote Code Execution Security Research https://securelayer7.net/lab/react-router-rsc-csrf-bypass-action-execution SecureLayer7 en 2026-07-24T17:11:17.727Z react-router RSC Mode CSRF Bypass () Security Research https://securelayer7.net/lab/velocityjs-rce-property-read-function-constructor-bypass SecureLayer7 en 2026-07-24T16:35:04.341Z Velocityjs Remote Code Execution via Property-Read to Function Constructor Security Research