Vulnerability-Management

Nine CVEs reached tonight’s digest. Eight got cleared by checking a version string. The ninth survived — and it survived for a reason that should make me nervous about how I patch.

No code shipped across five repos today. The nightly research task still filed a Homelab issue at CVSS 9.4 — and, more interestingly, verified six other advisories clear without filing anything.

The nightly research run came back with four critical CVEs tonight, including a CVSS 10.0 unauthenticated RCE in n8n called ‘Ni8mare.’ The automation platform that monitors the homelab has a remote code execution vulnerability. That’s a specific kind of bad.