Nlgbao1340

**Name of the Vulnerable Software and Affected Versions** Discourse versions prior to 2026.3.0-latest.1 Discourse versions prior to 2026.2.1 Discourse versions prior to 2026.1.2 **Description** Discourse, an open-source discussion platform, is affected by a cross-site scripting issue. The system improperly trusts and renders output from an AI Large Language Model (LLM) using `htmlSafe` within the Review Queue interface, lacking sufficient sanitization. An attacker can leverage Prompt Injection techniques to make the AI generate a malicious payload, such as tags. When a staff member (Admin/Moderator) views a flagged post in the Review Queue, this payload is executed. **Recommendations** Versions prior to 2026.3.0-latest.1 should be updated. Versions prior to 2026.2.1 should be updated. Versions prior to 2026.1.2 should be updated. As a temporary workaround, disable AI triage automation scripts.

**Name of the Vulnerable Software and Affected Versions** Discourse versions prior to 2026.3.0-latest.1 Discourse versions prior to 2026.2.1 Discourse versions prior to 2026.1.2 **Description** Discourse is an open-source discussion platform. Prior to versions 2026.3.0-latest.1, 2026.2.1, and 2026.1.2, the onebox method in the SharedAiConversation model renders the conversation title directly into HTML without proper sanitization. This could allow for potential issues related to the display of conversation titles. **Recommendations** Update Discourse to version 2026.3.0-latest.1 or later. Update Discourse to version 2026.2.1 or later. Update Discourse to version 2026.1.2 or later. As a workaround, tighten access by changing the `ai bot public sharing allowed groups` site setting.

**Name of the Vulnerable Software and Affected Versions** Outline versions prior to 1.5.0 **Description** Outline is a collaborative documentation service. Prior to version 1.5.0, a logic flaw exists in the filtering mechanism of the `/events.list` API endpoint, which is used to retrieve activity logs. This flaw allows any authenticated user to access activity events related to documents lacking a collection (such as Private Drafts and Deleted Documents), bypassing standard permission controls. While the document content itself is not directly exposed, sensitive metadata is leaked, including Document IDs, user activity timestamps, and, in some cases, the Document Title of Permanent Delete. The leakage of valid Document IDs from deleted drafts compromises the randomness of UUIDs, simplifying the exploitation of high-severity IDOR attacks, like those affecting the `documents.restore` function. **Recommendations** Versions prior to 1.5.0 should be updated to version 1.5.0 or later.

**Name of the Vulnerable Software and Affected Versions** Outline versions prior to 1.4.0 **Description** Outline is a collaborative documentation service. A security issue exists in the document restoration logic that allows any team member to restore, view, and take ownership of deleted drafts belonging to other users, including administrators, without authorization. This is due to a bypass of ownership validation during the restoration process, potentially allowing an attacker to access sensitive private information and prevent the original owner from accessing their content. The issue does not affect versions 1.4.0 and later. **Recommendations** Versions prior to 1.4.0 should be updated to version 1.4.0 or later.

**Nome do Software Vulnerável e Versões Afetadas** Versões do Flowise anteriores à 3.0.13 **Descrição** O Flowise, uma interface de usuário de arrastar e soltar para criar fluxos personalizados de modelos de linguagem grandes, contém uma vulnerabilidade de Falsificação de Requisição do Lado do Servidor (SSRF). O aplicativo expõe um Nó HTTP dentro do AgentFlow e do Chatflow que realiza solicitações HTTP do lado do servidor usando URLs controladas pelo usuário. Não há restrições aos hosts de destino, permitindo solicitações para intervalos de IPs privados, localhost ou endpoints de metadados de nuvem. Isso permite que um atacante interagindo com um chatflow exposto publicamente force o servidor Flowise a realizar solicitações a recursos de rede interna que, de outra forma, seriam inacessíveis a partir da internet pública. **Recomendações** Atualize para a versão 3.0.13 ou posterior.

**Nome do Software Vulnerável e Versões Afetadas** Versões do n8n anteriores à 1.118.0 Versões do n8n anteriores à 2.4.0 **Descrição** O n8n é uma plataforma de automação de fluxo de trabalho. Uma falha no modo SQL Query do nó Merge permitiu que usuários autenticados com direitos de criação ou modificação de fluxo de trabalho gravassem arquivos arbitrários no sistema de arquivos do servidor n8n, potencialmente resultando em execução remota de código. O problema afeta usuários com a capacidade de criar ou modificar fluxos de trabalho. **Recomendações** Atualize para a versão 1.118.0 ou posterior do n8n. Atualize para a versão 2.4.0 ou posterior do n8n.

**Name of the Vulnerable Software and Affected Versions** n8n versions prior to 1.114.0 **Description** n8n is a workflow automation platform. A stored Cross-Site Scripting (XSS) issue may occur when using the “Respond to Webhook” node in versions before 1.114.0. If this node responds with HTML content containing executable scripts, the payload may execute directly in the top-level window. This can allow a malicious actor with workflow creation permissions to execute arbitrary JavaScript in the n8n editor interface. **Recommendations** Restrict workflow creation and modification privileges to trusted users only. Avoid using untrusted HTML responses in the “Respond to Webhook” node. Use an external reverse proxy or HTML sanitizer to filter responses that include executable scripts.