{"resultsPerPage":5,"startIndex":0,"totalResults":5,"format":"NVD_CVE","version":"2.0","timestamp":"2026-11-12T20:07:50.862","vulnerabilities":[{"cve":{"id":"CVE-2024-34689","sourceIdentifier":"cna@sap.com","published":"2024-07-09T05:15:10.873","lastModified":"2026-06-17T07:33:52.963","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"WebFlow Services of SAP Business Workflow allows\nan authenticated attacker to enumerate accessible HTTP endpoints in the\ninternal network by specially crafting HTTP requests. On successful\nexploitation this can result in information disclosure. It has no impact on\nintegrity and availability of the application."},{"lang":"es","value":"WebFlow Services de SAP Business Workflow permite a un atacante autenticado enumerar endpoints HTTP accesibles en la red interna mediante la elaboración especial de solicitudes HTTP. Si se explota con éxito, esto puede dar lugar a la divulgación de información. No tiene ningún impacto en la integridad y disponibilidad de la aplicación."}],"affected":[{"source":"cna@sap.com","affectedData":[{"vendor":"SAP_SE","product":"SAP Business Workflow (WebFlow Services)","defaultStatus":"unaffected","versions":[{"version":"SAP_BASIS 700","status":"affected"},{"version":"SAP_BASIS 701","status":"affected"},{"version":"SAP_BASIS 702","status":"affected"},{"version":"SAP_BASIS 731","status":"affected"},{"version":"SAP_BASIS 740","status":"affected"},{"version":"SAP_BASIS 750","status":"affected"},{"version":"SAP_BASIS 751","status":"affected"},{"version":"SAP_BASIS 752","status":"affected"},{"version":"SAP_BASIS 753","status":"affected"},{"version":"SAP_BASIS 754","status":"affected"},{"version":"SAP_BASIS 755","status":"affected"},{"version":"SAP_BASIS 756","status":"affected"},{"version":"SAP_BASIS 757","status":"affected"},{"version":"SAP_BASIS 758","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"sap_se","product":"sap_business_workflow_\\(webflow_services\\)","defaultStatus":"unaffected","cpes":["cpe:2.3:a:sap_se:sap_business_workflow_\\(webflow_services\\):*:*:*:*:*:*:*:*"],"versions":[{"version":"SAP_BASIS 700","status":"affected"},{"version":"SAP_BASIS 701","status":"affected"},{"version":"SAP_BASIS 702","status":"affected"},{"version":"SAP_BASIS 731","status":"affected"},{"version":"SAP_BASIS 740","status":"affected"},{"version":"SAP_BASIS 750","status":"affected"},{"version":"SAP_BASIS 751","status":"affected"},{"version":"SAP_BASIS 752","status":"affected"},{"version":"SAP_BASIS 753","status":"affected"},{"version":"SAP_BASIS 754","status":"affected"},{"version":"SAP_BASIS 755","status":"affected"},{"version":"SAP_BASIS 756","status":"affected"},{"version":"SAP_BASIS 757","status":"affected"},{"version":"SAP_BASIS 758","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"cna@sap.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N","baseScore":5.0,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.1,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N","baseScore":5.0,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.1,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-07-25T14:21:05.637426Z","id":"CVE-2024-34689","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"cna@sap.com","type":"Secondary","description":[{"lang":"en","value":"CWE-918"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-918"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sap:business_workflow:*:*:*:*:*:*:*:*","matchCriteriaId":"1FF29F57-F1C8-4905-B61F-9E72BF689C39"},{"vulnerable":true,"criteria":"cpe:2.3:a:sap:sap_basis:700:*:*:*:*:*:*:*","matchCriteriaId":"85616273-040E-49CB-8EB6-D2D4D7B603E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sap:sap_basis:701:*:*:*:*:*:*:*","matchCriteriaId":"C5F2C3A9-DCC0-4FF1-8E68-9EA150E209F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sap:sap_basis:702:*:*:*:*:*:*:*","matchCriteriaId":"6F774A45-2A9F-4873-A5DC-766D030C8CCD"},{"vulnerable":true,"criteria":"cpe:2.3:a:sap:sap_basis:731:*:*:*:*:*:*:*","matchCriteriaId":"D3A0A2D6-9259-4A35-A236-F4BEE986C1FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:sap:sap_basis:740:*:*:*:*:*:*:*","matchCriteriaId":"49C3A8E5-FA6A-4EF3-BF50-FD4E1576024F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sap:sap_basis:750:*:*:*:*:*:*:*","matchCriteriaId":"ABA8AB4E-3FE6-46A8-847E-660C5DF6CE71"},{"vulnerable":true,"criteria":"cpe:2.3:a:sap:sap_basis:751:*:*:*:*:*:*:*","matchCriteriaId":"6DA4A6F0-C0F1-42CB-8BBD-7198064733EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sap:sap_basis:752:*:*:*:*:*:*:*","matchCriteriaId":"8C121CC9-26F6-4103-8EB0-BAFF6B5B5FE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sap:sap_basis:753:*:*:*:*:*:*:*","matchCriteriaId":"86086D00-10BF-4C55-8D87-82CCBE468153"},{"vulnerable":true,"criteria":"cpe:2.3:a:sap:sap_basis:754:*:*:*:*:*:*:*","matchCriteriaId":"2F25246A-D9E5-4F0D-B91A-478D4E5570DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sap:sap_basis:755:*:*:*:*:*:*:*","matchCriteriaId":"0218695F-C4AD-46BF-B176-F10C644A9C2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sap:sap_basis:756:*:*:*:*:*:*:*","matchCriteriaId":"FC9E7C3E-1005-450A-9198-E014C1BAADBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:sap:sap_basis:757:*:*:*:*:*:*:*","matchCriteriaId":"3A177AB1-CC85-46EF-91DF-462096608C9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sap:sap_basis:758:*:*:*:*:*:*:*","matchCriteriaId":"F7591F81-708C-4285-9BB2-F2B4BDB9759B"}]}]}],"references":[{"url":"https://me.sap.com/notes/3458789","source":"cna@sap.com","tags":["Permissions Required"]},{"url":"https://url.sap/sapsecuritypatchday","source":"cna@sap.com","tags":["Vendor Advisory"]},{"url":"https://me.sap.com/notes/3458789","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"https://url.sap/sapsecuritypatchday","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-49818","sourceIdentifier":"audit@patchstack.com","published":"2024-12-09T13:15:36.327","lastModified":"2026-06-17T06:36:31.457","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Missing Authorization vulnerability in Webflow Webflow Pages allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Webflow Pages: from n/a through 1.0.8."},{"lang":"es","value":"La vulnerabilidad de autorización faltante en Webflow Pages permite explotar niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a Webflow Pages: desde n/a hasta 1.0.8."}],"affected":[{"source":"audit@patchstack.com","affectedData":[{"vendor":"Webflow","product":"Webflow Pages","defaultStatus":"unaffected","collectionURL":"https://wordpress.org/plugins","packageName":"webflow-pages","versions":[{"version":"n/a","lessThanOrEqual":"1.0.8","versionType":"custom","status":"affected","changes":[{"at":"1.1.0","status":"unaffected"}]}]}]}],"metrics":{"cvssMetricV31":[{"source":"audit@patchstack.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-12-09T22:09:58.013148Z","id":"CVE-2023-49818","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"audit@patchstack.com","type":"Secondary","description":[{"lang":"en","value":"CWE-862"}]}],"references":[{"url":"https://patchstack.com/database/wordpress/plugin/webflow-pages/vulnerability/wordpress-webflow-pages-plugin-1-0-8-broken-access-control-vulnerability?_s_id=cve","source":"audit@patchstack.com"}]}},{"cve":{"id":"CVE-2026-40985","sourceIdentifier":"security@vmware.com","published":"2026-06-11T05:16:33.757","lastModified":"2026-09-04T18:12:31.860","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Applications that configure the WebFlowELExpressionParser are vulnerable to the use of malicious Unified EL expressions.\n\nAffected versions:\nSpring Web Flow 4.0.0; 3.0.0 through 3.0.1; 2.5.0 through 2.5.1."},{"lang":"es","value":"Aplicaciones que configuran el WebFlowELExpressionParser son vulnerables al uso de expresiones EL unificadas maliciosas.\n\nVersiones afectadas:\nSpring Web Flow 4.0.0; 3.0.0 a 3.0.1; 2.5.0 a 2.5.1."}],"affected":[{"source":"security@vmware.com","affectedData":[{"vendor":"Spring","product":"Spring Web Flow","defaultStatus":"unaffected","versions":[{"version":"4.0.0","lessThan":"4.0.0.1","versionType":"custom","status":"affected"},{"version":"3.0.0","lessThan":"3.0.1.1","versionType":"custom","status":"affected"},{"version":"2.5.0","lessThan":"2.5.2","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"security@vmware.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N","baseScore":6.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":1.2,"impactScore":5.2}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-06-11T12:47:01.292975Z","id":"CVE-2026-40985","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"security@vmware.com","type":"Secondary","description":[{"lang":"en","value":"CWE-917"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:spring_web_flow:*:*:*:*:*:*:*:*","versionEndExcluding":"2.5.2","matchCriteriaId":"2AD1649A-0A75-4F05-9C73-D08D24A9A5D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:spring_web_flow:*:*:*:*:*:*:*:*","versionStartIncluding":"3.0.0","versionEndExcluding":"3.0.1.1","matchCriteriaId":"A1107F4C-EBDC-4024-A99F-A739AE3625A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:spring_web_flow:4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"85B5CA38-4D2A-4367-A735-ABAB927D4B13"}]}]}],"references":[{"url":"https://spring.io/security/cve-2026-40985","source":"security@vmware.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2026-59099","sourceIdentifier":"disclosure@vulncheck.com","published":"2026-07-02T20:17:08.240","lastModified":"2026-10-25T21:10:00.770","vulnStatus":"Awaiting Analysis","cveTags":[],"descriptions":[{"lang":"en","value":"Apereo CAS 7.3.0 before 8.0.0-RC6 contains a cryptographic vulnerability that allows remote unauthenticated attackers to recover plaintext conversation state by exploiting AES-GCM initialization vector reuse across the server lifetime. Attackers can collect multiple client-side webflow execution tokens from the unauthenticated login page and perform known-plaintext analysis to decrypt the webflow conversation state due to keystream reuse caused by a fixed all-zero IV paired with the same encryption key."},{"lang":"es","value":"Apereo CAS 7.3.0 anterior a 8.0.0-RC6 contiene una vulnerabilidad criptográfica que permite a atacantes remotos no autenticados recuperar el estado de conversación en texto plano explotando la reutilización del vector de inicialización AES-GCM a lo largo de la vida útil del servidor. Los atacantes pueden recolectar múltiples tokens de ejecución de webflow del lado del cliente desde la página de inicio de sesión no autenticada y realizar análisis de texto plano conocido para descifrar el estado de conversación del webflow debido a la reutilización del flujo de claves causada por un IV fijo de todo ceros emparejado con la misma clave de cifrado."}],"affected":[{"source":"disclosure@vulncheck.com","affectedData":[{"vendor":"apereo","product":"cas","defaultStatus":"unaffected","repo":"https://github.com/apereo/cas","packageURL":"pkg:github/apereo/cas","versions":[{"version":"7.3.0","lessThan":"8.0.0-RC6","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":9.3,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","baseScore":9.1,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":5.2}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-07-06T12:29:20.364889Z","id":"CVE-2026-59099","options":[{"exploitation":"poc"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"disclosure@vulncheck.com","type":"Secondary","description":[{"lang":"en","value":"CWE-323"}]}],"references":[{"url":"https://apereo.github.io/2026/06/18/vuln/","source":"disclosure@vulncheck.com"},{"url":"https://github.com/apereo/cas/commit/22c6f4adf738852782309b523b4e80371057f2d0","source":"disclosure@vulncheck.com"},{"url":"https://github.com/apereo/cas/releases/tag/v8.0.0-RC6","source":"disclosure@vulncheck.com"},{"url":"https://github.com/geo-chen/oss/blob/main/cas.md","source":"disclosure@vulncheck.com"},{"url":"https://www.vulncheck.com/advisories/apereo-cas-rc6-aes-gcm-nonce-reuse-information-disclosure","source":"disclosure@vulncheck.com"}]}},{"cve":{"id":"CVE-2026-103245","sourceIdentifier":"disclosure@vulncheck.com","published":"2026-10-01T11:17:17.670","lastModified":"2026-10-01T15:17:26.180","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"n8n versions before 1.123.80, from 2.0.0 before 2.39.6, and from 2.40.0 before 2.40.1 fail to verify the x-webflow-signature HMAC in the Webflow Trigger node webhook handler. Unauthenticated attackers can send forged webhook requests with attacker-controlled payloads to trigger workflows and manipulate downstream actions like record creation or API calls."}],"affected":[{"source":"disclosure@vulncheck.com","affectedData":[{"vendor":"n8n-io","product":"n8n","defaultStatus":"unaffected","packageURL":"pkg:npm/n8n","versions":[{"version":"0","lessThan":"1.123.80","versionType":"semver","status":"affected"},{"version":"2.0.0","lessThan":"2.39.6","versionType":"semver","status":"affected"},{"version":"2.40.0","lessThan":"2.40.1","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":6.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"LOW","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-10-01T15:02:18.003977Z","id":"CVE-2026-103245","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"disclosure@vulncheck.com","type":"Secondary","description":[{"lang":"en","value":"CWE-347"}]}],"references":[{"url":"https://github.com/n8n-io/n8n/security/advisories/GHSA-hwv9-jhc7-f7c4","source":"disclosure@vulncheck.com"},{"url":"https://www.vulncheck.com/advisories/n8n-before-1.123.80-2.39.6-and-2.40.1-missing-webhook-signature-verification","source":"disclosure@vulncheck.com"}]}}]}