Vipinxsec

**Name of the Vulnerable Software and Affected Versions** n8n versions prior to 1.123.48 n8n versions prior to 2.21.8 n8n versions prior to 2.22.4 **Description** An authenticated user with permissions to create or modify workflows containing a Python Code Node can escape the sandbox to achieve arbitrary code execution on the task runner container. This issue specifically affects instances where the Python Task Runner is enabled. **Recommendations** Update to version 1.123.48 or later. Update to version 2.21.8 or later. Update to version 2.22.4 or later. Limit workflow creation and editing permissions to fully trusted users only. Disable the Python Code node by adding `n8n-nodes-base.code` to the `NODES EXCLUDE` environment variable. Disable the Python Task Runner entirely.

**Name of the Vulnerable Software and Affected Versions** Alfresco Enterprise versions prior to 5.2.5 **Description** The issue allows for stored XSS via an uploaded HTML document. This means an attacker can upload a malicious HTML file to the system, which can then execute scripts on the user's browser, potentially leading to unauthorized actions or data theft. **Recommendations** For versions prior to 5.2.5, update to version 5.2.5 or later to resolve the issue. As a temporary workaround, consider restricting the upload of HTML documents to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** WampServer version 3.1.1 **Description** A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML via the `virtual del` parameter. This can lead to the execution of malicious scripts on the client-side. **Recommendations** For WampServer version 3.1.1, update to a newer version that contains a fix for this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.