Results for "Denial of service"

• Article

  CVE-2026-21894: n8n Missing Stripe-Signature Verification Allows Forged Webhooks

  Authentication bypass in n8n’s StripeTrigger node allows unauthenticated attackers to forge arbitrary Stripe webhooks without knowing the signing secret.

  4 February 2026
• Article

  CVE-2025-48889: Gradio Unauthorized File Copy via Path Manipulation

  Arbitrary file copy vulnerability in Gradio’s flagging feature allows unauthenticated attackers to copy any readable file from the server’s filesystem.

  29 May 2025