Ori-Ron

**Name of the Vulnerable Software and Affected Versions** n8n versions prior to 1.123.32 n8n versions prior to 2.17.4 n8n versions prior to 2.18.1 **Description** The '/mcp-oauth/register' endpoint allows OAuth client registrations without authentication, which permits the registration of arbitrary `redirect uri` values. When a user denies the MCP OAuth consent dialog, the `handleDeny()` handler redirects the user to the registered `redirect uri` without validation. This creates an open redirect, allowing an attacker to use a phishing link to silently redirect a victim to an external, attacker-controlled site if the victim clicks "Deny" on the consent page. **Recommendations** Update to version 1.123.32. Update to version 2.17.4. Update to version 2.18.1.

**Name of the Vulnerable Software and Affected Versions** n8n versions prior to 1.123.32 n8n versions prior to 2.17.4 n8n versions prior to 2.18.1 **Description** The MCP OAuth client registration endpoint accepts unauthenticated requests and stores client data without adequate resource controls. A remote attacker can exhaust server memory resources by sending large registration payloads, leading to a denial of service that renders the instance unavailable. The endpoint remains reachable even if the MCP enable/disable toggle is used to gate access. **Recommendations** Update to version 1.123.32. Update to version 2.17.4. Update to version 2.18.1.

**Name of the Vulnerable Software and Affected Versions** n8n versions prior to 2.10.1 n8n versions prior to 2.9.3 n8n versions prior to 1.123.22 **Description** n8n is a workflow automation platform susceptible to arbitrary script injection. An authenticated user with permission to create or modify workflows could inject malicious scripts into pages rendered by the n8n application through various nodes, including the Form Trigger node, Chat Trigger node, Send & Wait node, Webhook Node, and Chat Node. These injected scripts execute in the browser of any user visiting the affected page, potentially leading to session hijacking and account takeover. **Recommendations** Upgrade to n8n version 2.10.1 or later. Upgrade to n8n version 2.9.3 or later. Upgrade to n8n version 1.123.22 or later. If upgrading is not immediately possible, limit workflow creation and editing permissions to fully trusted users only. If upgrading is not immediately possible, disable the Webhook node by adding `n8n-nodes-base.webhook` to the `NODES EXCLUDE` environment variable.

**Name of the Vulnerable Software and Affected Versions** FreeRDP versions prior to 3.23.0 **Description** FreeRDP is a free implementation of the Remote Desktop Protocol. A previous fix for a heap-use-after-free issue was incomplete. The vulnerable code exists in the SDL2 implementation, where a pointer is not nulled after being freed, potentially leading to a security issue. The fix was initially applied only to the SDL3 code path. **Recommendations** Update to version 3.23.0 or later.