n8n (npm)
Advisories
374
Latest version
—
License
—
OpenSSF Scorecard
—
How to fix
Upgrading to 2.38.2 or later clears every advisory below that has a fix.
Upgrade commands
npm
npm install n8n@2.38.2yarn
yarn add n8n@2.38.2pnpm
pnpm add n8n@2.38.2Known vulnerabilities
| Advisory | Severity | Affected | Fixed in |
|---|---|---|---|
| GHSA-qgpw-8g46-w95v n8n: Git Node branch.<name>.remote Config Key Bypasses Sandbox Path Restriction, Enabling Local Git Repository Read |
Medium EPSS 0.40% |
>= 2.0.0, < 2.37.7 | 2.37.7 |
| GHSA-qgpw-8g46-w95v n8n: Git Node branch.<name>.remote Config Key Bypasses Sandbox Path Restriction, Enabling Local Git Repository Read |
Medium EPSS 0.40% |
< 1.123.76 | 1.123.76 |
| GHSA-qgpw-8g46-w95v n8n: Git Node branch.<name>.remote Config Key Bypasses Sandbox Path Restriction, Enabling Local Git Repository Read |
Medium EPSS 0.40% |
>= 2.38.0, < 2.38.2 | 2.38.2 |
| GHSA-65xw-2v52-jhxc n8n: Cross-User Active Workflow ID and Lifecycle Event Disclosure via Missing userId Filter |
Medium EPSS 0.34% |
>= 2.0.0, < 2.37.7 | 2.37.7 |
| GHSA-65xw-2v52-jhxc n8n: Cross-User Active Workflow ID and Lifecycle Event Disclosure via Missing userId Filter |
Medium EPSS 0.34% |
>= 2.38.0, < 2.38.2 | 2.38.2 |
| GHSA-65xw-2v52-jhxc n8n: Cross-User Active Workflow ID and Lifecycle Event Disclosure via Missing userId Filter |
Medium EPSS 0.34% |
< 1.123.76 | 1.123.76 |
| GHSA-pq6c-vh67-xpm3 n8n: Log Streaming Event Destinations Decrypt Generic-Auth Credentials Without Ownership Check |
Medium EPSS 0.46% |
>= 2.38.0, < 2.38.2 | 2.38.2 |
| GHSA-pq6c-vh67-xpm3 n8n: Log Streaming Event Destinations Decrypt Generic-Auth Credentials Without Ownership Check |
Medium EPSS 0.46% |
< 1.123.76 | 1.123.76 |
| GHSA-pq6c-vh67-xpm3 n8n: Log Streaming Event Destinations Decrypt Generic-Auth Credentials Without Ownership Check |
Medium EPSS 0.46% |
>= 2.0.0, < 2.37.7 | 2.37.7 |
| GHSA-cqr2-h44g-v75v n8n: Cross-Tenant Project-Member PII Disclosure via Missing Per-Project Scope Check on Role Assignment Endpoints |
Medium EPSS 0.44% |
< 2.37.7 | 2.37.7 |
| GHSA-cqr2-h44g-v75v n8n: Cross-Tenant Project-Member PII Disclosure via Missing Per-Project Scope Check on Role Assignment Endpoints |
Medium EPSS 0.44% |
>= 2.38.0, < 2.38.2 | 2.38.2 |
| GHSA-pf83-w3f9-8m37 n8n: Disabled OIDC SSO Endpoints Remain Active and Issue Valid Sessions |
Medium EPSS 0.46% |
< 1.123.76 | 1.123.76 |
| GHSA-pf83-w3f9-8m37 n8n: Disabled OIDC SSO Endpoints Remain Active and Issue Valid Sessions |
Medium EPSS 0.46% |
>= 2.38.0, < 2.38.2 | 2.38.2 |
| GHSA-pf83-w3f9-8m37 n8n: Disabled OIDC SSO Endpoints Remain Active and Issue Valid Sessions |
Medium EPSS 0.46% |
>= 2.0.0, < 2.37.7 | 2.37.7 |
| GHSA-6xcw-7xm6-48c6 n8n: Expression Sandbox Escape via Shared Builtin Tampering and Code-Printer Injection Leads to Code Execution |
High EPSS 0.66% |
>= 2.0.0, < 2.37.7 | 2.37.7 |
| GHSA-6xcw-7xm6-48c6 n8n: Expression Sandbox Escape via Shared Builtin Tampering and Code-Printer Injection Leads to Code Execution |
High EPSS 0.66% |
< 1.123.76 | 1.123.76 |
| GHSA-6xcw-7xm6-48c6 n8n: Expression Sandbox Escape via Shared Builtin Tampering and Code-Printer Injection Leads to Code Execution |
High EPSS 0.66% |
>= 2.38.0, < 2.38.2 | 2.38.2 |
| GHSA-34ff-336r-5q23 n8n: Domain-Restriction Bypass via Unguarded Model-Search Endpoint in OpenAI Chat Model Node |
Medium EPSS 0.41% |
>= 2.0.0, < 2.37.7 | 2.37.7 |
| GHSA-34ff-336r-5q23 n8n: Domain-Restriction Bypass via Unguarded Model-Search Endpoint in OpenAI Chat Model Node |
Medium EPSS 0.41% |
>= 2.38.0, < 2.38.2 | 2.38.2 |
| GHSA-34ff-336r-5q23 n8n: Domain-Restriction Bypass via Unguarded Model-Search Endpoint in OpenAI Chat Model Node |
Medium EPSS 0.41% |
< 1.123.76 | 1.123.76 |
| GHSA-j535-v25q-vx3q n8n: Regular Expression Denial of Service in the Default Blocked-File-Pattern Match via a Git Node Clone Path |
High EPSS 0.56% |
>= 2.38.0, < 2.38.2 | 2.38.2 |
| GHSA-j535-v25q-vx3q n8n: Regular Expression Denial of Service in the Default Blocked-File-Pattern Match via a Git Node Clone Path |
High EPSS 0.56% |
< 1.123.76 | 1.123.76 |
| GHSA-j535-v25q-vx3q n8n: Regular Expression Denial of Service in the Default Blocked-File-Pattern Match via a Git Node Clone Path |
High EPSS 0.56% |
>= 2.0.0, < 2.37.7 | 2.37.7 |
| GHSA-5m98-cgcr-xx3q n8n: GitHub Trigger 422 Reuse Path Skips Webhook Secret Storage, Causing Signature Verification to Fail-Open |
Medium EPSS 0.26% |
< 1.123.76 | 1.123.76 |
| GHSA-5m98-cgcr-xx3q n8n: GitHub Trigger 422 Reuse Path Skips Webhook Secret Storage, Causing Signature Verification to Fail-Open |
Medium EPSS 0.26% |
>= 2.0.0, < 2.37.7 | 2.37.7 |
| GHSA-5m98-cgcr-xx3q n8n: GitHub Trigger 422 Reuse Path Skips Webhook Secret Storage, Causing Signature Verification to Fail-Open |
Medium EPSS 0.26% |
>= 2.38.0, < 2.38.2 | 2.38.2 |
| GHSA-f2cp-m7mv-8jpv n8n: Path Injection in Elasticsearch and ElasticSecurity Nodes via Unencoded Identifiers |
Medium EPSS 0.49% |
< 1.123.76 | 1.123.76 |
| GHSA-f2cp-m7mv-8jpv n8n: Path Injection in Elasticsearch and ElasticSecurity Nodes via Unencoded Identifiers |
Medium EPSS 0.49% |
>= 2.38.0, < 2.38.2 | 2.38.2 |
| GHSA-f2cp-m7mv-8jpv n8n: Path Injection in Elasticsearch and ElasticSecurity Nodes via Unencoded Identifiers |
Medium EPSS 0.49% |
>= 2.0.0, < 2.37.7 | 2.37.7 |
| GHSA-679f-58pq-4v2c n8n: Prototype Pollution via Workflow Structure Summary Can Lead to Denial of Service |
Medium EPSS 0.59% |
< 2.37.7 | 2.37.7 |
| GHSA-679f-58pq-4v2c n8n: Prototype Pollution via Workflow Structure Summary Can Lead to Denial of Service |
Medium EPSS 0.59% |
>= 2.38.0, < 2.38.2 | 2.38.2 |
| GHSA-35jj-42hp-8gmq n8n: Anonymous Approval-Gate Bypass via Reused resumeToken over the Chat WebSocket |
Medium EPSS 0.43% |
>= 2.38.0, < 2.38.2 | 2.38.2 |
| GHSA-35jj-42hp-8gmq n8n: Anonymous Approval-Gate Bypass via Reused resumeToken over the Chat WebSocket |
Medium EPSS 0.43% |
< 2.37.7 | 2.37.7 |
| GHSA-hw8v-xxg5-vvvx n8n: Expression Sandbox Escape via Class-Field Sanitizer Rebinding Can Lead to Code Execution |
High EPSS 0.79% |
>= 2.0.0, < 2.37.7 | 2.37.7 |
| GHSA-hw8v-xxg5-vvvx n8n: Expression Sandbox Escape via Class-Field Sanitizer Rebinding Can Lead to Code Execution |
High EPSS 0.79% |
>= 2.38.0, < 2.38.2 | 2.38.2 |
| GHSA-hw8v-xxg5-vvvx n8n: Expression Sandbox Escape via Class-Field Sanitizer Rebinding Can Lead to Code Execution |
High EPSS 0.79% |
< 1.123.76 | 1.123.76 |
| GHSA-hh89-3r9w-qj3j n8n: Unauthenticated Persistent Storage Exhaustion via OAuth Dynamic Client Registration Endpoint |
High EPSS 0.61% |
< 2.37.7 | 2.37.7 |
| GHSA-hh89-3r9w-qj3j n8n: Unauthenticated Persistent Storage Exhaustion via OAuth Dynamic Client Registration Endpoint |
High EPSS 0.61% |
>= 2.38.0, < 2.38.2 | 2.38.2 |
| GHSA-7hgx-277f-7vmg n8n: Agent Workflow Tool Bypasses Sub-Workflow Caller Policy |
Medium EPSS 0.29% |
>= 2.38.0, < 2.38.2 | 2.38.2 |
| GHSA-7hgx-277f-7vmg n8n: Agent Workflow Tool Bypasses Sub-Workflow Caller Policy |
Medium EPSS 0.29% |
< 2.37.7 | 2.37.7 |
| GHSA-q5wm-mgqx-fv2f n8n: Instance AI Credential Setup Accepts Unvalidated Probe URL from Fetched Content |
High EPSS 0.38% |
>= 2.38.0, < 2.38.2 | 2.38.2 |
| GHSA-q5wm-mgqx-fv2f n8n: Instance AI Credential Setup Accepts Unvalidated Probe URL from Fetched Content |
High EPSS 0.38% |
< 2.37.7 | 2.37.7 |
| GHSA-cw9w-vv67-hf73 n8n: Per-Resource OAuth Consent Bypass via Unbound Refresh Token Resource Substitution |
High EPSS 0.39% |
>= 2.38.0, < 2.38.1 | 2.38.1 |
| GHSA-cw9w-vv67-hf73 n8n: Per-Resource OAuth Consent Bypass via Unbound Refresh Token Resource Substitution |
High EPSS 0.39% |
< 2.37.7 | 2.37.7 |
| GHSA-652q-gvq3-74qv n8n: Snowflake Node executeQuery Operation Allows SQL Injection via Unparameterized Expression Interpolation |
High EPSS 0.47% |
>= 2.32.0, < 2.32.1 | 2.32.1 |
| GHSA-652q-gvq3-74qv n8n: Snowflake Node executeQuery Operation Allows SQL Injection via Unparameterized Expression Interpolation |
High EPSS 0.47% |
< 1.123.67 | 1.123.67 |
| GHSA-652q-gvq3-74qv n8n: Snowflake Node executeQuery Operation Allows SQL Injection via Unparameterized Expression Interpolation |
High EPSS 0.47% |
>= 2.0.0-rc.0, < 2.31.5 | 2.31.5 |
| GHSA-jqwr-vx3p-r266 n8n: PostgresTrigger Node SQL Injection Allows Authenticated Users to Execute Arbitrary SQL on Connected PostgreSQL Instances |
High EPSS 0.47% |
>= 2.0.0-rc.0, < 2.31.5 | 2.31.5 |
| GHSA-jqwr-vx3p-r266 n8n: PostgresTrigger Node SQL Injection Allows Authenticated Users to Execute Arbitrary SQL on Connected PostgreSQL Instances |
High EPSS 0.47% |
< 1.123.67 | 1.123.67 |
| GHSA-jqwr-vx3p-r266 n8n: PostgresTrigger Node SQL Injection Allows Authenticated Users to Execute Arbitrary SQL on Connected PostgreSQL Instances |
High EPSS 0.47% |
>= 2.32.0, < 2.32.1 | 2.32.1 |
| GHSA-9cmh-xcqm-5hqr n8n: Cross-Tenant Module-Cache Poisoning in the JS Task Runner |
High EPSS 0.81% |
< 1.123.67 | 1.123.67 |
| GHSA-9cmh-xcqm-5hqr n8n: Cross-Tenant Module-Cache Poisoning in the JS Task Runner |
High EPSS 0.81% |
>= 2.0.0-rc.0, < 2.31.5 | 2.31.5 |
| GHSA-9cmh-xcqm-5hqr n8n: Cross-Tenant Module-Cache Poisoning in the JS Task Runner |
High EPSS 0.81% |
>= 2.32.0, < 2.32.1 | 2.32.1 |
| GHSA-pf2q-pxhf-hgmw n8n: Path-Confinement Bypass in computer-use search_files Allows Reading Files Outside the Base Directory |
High EPSS 0.57% |
>= 2.32.0, < 2.32.1 | 2.32.1 |
| GHSA-pf2q-pxhf-hgmw n8n: Path-Confinement Bypass in computer-use search_files Allows Reading Files Outside the Base Directory |
High EPSS 0.57% |
< 2.31.5 | 2.31.5 |
| GHSA-hx4h-vr3m-45vh n8n: Prototype Pollution via VM Expression Engine Sandbox Escape Leads to Denial of Service |
High EPSS 0.51% |
< 1.123.67 | 1.123.67 |
| GHSA-hx4h-vr3m-45vh n8n: Prototype Pollution via VM Expression Engine Sandbox Escape Leads to Denial of Service |
High EPSS 0.51% |
>= 2.0.0-rc.0, < 2.31.5 | 2.31.5 |
| GHSA-hx4h-vr3m-45vh n8n: Prototype Pollution via VM Expression Engine Sandbox Escape Leads to Denial of Service |
High EPSS 0.51% |
>= 2.32.0, < 2.32.1 | 2.32.1 |
| GHSA-xwx6-jjhv-84p8 n8n: Prototype Pollution via Dot-Notation Field Names Leads To Instance-Wide Denial of Service |
Medium EPSS 0.57% |
>= 2.0.0-rc.0, < 2.31.5 | 2.31.5 |
| GHSA-xwx6-jjhv-84p8 n8n: Prototype Pollution via Dot-Notation Field Names Leads To Instance-Wide Denial of Service |
Medium EPSS 0.57% |
< 1.123.67 | 1.123.67 |
| GHSA-xwx6-jjhv-84p8 n8n: Prototype Pollution via Dot-Notation Field Names Leads To Instance-Wide Denial of Service |
Medium EPSS 0.57% |
>= 2.32.0, < 2.32.1 | 2.32.1 |
| GHSA-xmc9-4f2h-jf9c n8n: Edit Image Node Format Injection Allows Arbitrary File Write |
High EPSS 0.48% |
>= 2.0.0-rc.0, < 2.31.5 | 2.31.5 |
| GHSA-xmc9-4f2h-jf9c n8n: Edit Image Node Format Injection Allows Arbitrary File Write |
High EPSS 0.48% |
< 1.123.67 | 1.123.67 |
| GHSA-xmc9-4f2h-jf9c n8n: Edit Image Node Format Injection Allows Arbitrary File Write |
High EPSS 0.48% |
>= 2.32.0, < 2.32.1 | 2.32.1 |
| GHSA-cj9h-qx8g-pq2g n8n: Shared-Workflow Editor Can Exfiltrate Credentials via Inline Sub-Workflow JSON |
Medium EPSS 0.36% |
< 1.123.67 | 1.123.67 |
| GHSA-cj9h-qx8g-pq2g n8n: Shared-Workflow Editor Can Exfiltrate Credentials via Inline Sub-Workflow JSON |
Medium EPSS 0.36% |
>= 2.32.0, < 2.32.1 | 2.32.1 |
| GHSA-cj9h-qx8g-pq2g n8n: Shared-Workflow Editor Can Exfiltrate Credentials via Inline Sub-Workflow JSON |
Medium EPSS 0.36% |
>= 2.0.0-rc.0, < 2.31.5 | 2.31.5 |
| GHSA-6qc9-mqvw-jg7x n8n: Credential Authorization Bypass via Expression in HTTP Request Node `genericAuthType` |
Medium EPSS 0.44% |
>= 2.0.0-rc.0, < 2.31.5 | 2.31.5 |
| GHSA-6qc9-mqvw-jg7x n8n: Credential Authorization Bypass via Expression in HTTP Request Node `genericAuthType` |
Medium EPSS 0.44% |
>= 2.32.0, < 2.32.1 | 2.32.1 |
| GHSA-6qc9-mqvw-jg7x n8n: Credential Authorization Bypass via Expression in HTTP Request Node `genericAuthType` |
Medium EPSS 0.44% |
< 1.123.67 | 1.123.67 |
| GHSA-gv7g-jm28-cr3m n8n: Expression sandbox escape via arrow-function bodies enabling command execution |
Critical EPSS 0.86% |
< 2.31.5 | 2.31.5 |
| GHSA-gv7g-jm28-cr3m n8n: Expression sandbox escape via arrow-function bodies enabling command execution |
Critical EPSS 0.86% |
>= 2.32.0, < 2.32.1 | 2.32.1 |
| GHSA-2x35-3fw4-9jr4 n8n: Send Email Node Arbitrary File Read and SSRF via Nodemailer Content-Object Type Confusion |
High EPSS 0.44% |
< 1.123.67 | 1.123.67 |
| GHSA-2x35-3fw4-9jr4 n8n: Send Email Node Arbitrary File Read and SSRF via Nodemailer Content-Object Type Confusion |
High EPSS 0.44% |
>= 2.0.0-rc.0, < 2.31.5 | 2.31.5 |
| GHSA-2x35-3fw4-9jr4 n8n: Send Email Node Arbitrary File Read and SSRF via Nodemailer Content-Object Type Confusion |
High EPSS 0.44% |
>= 2.32.0, < 2.32.1 | 2.32.1 |
| GHSA-rcv6-pvrj-4xcg n8n: Authenticated code execution in the n8n Git node |
High EPSS 0.88% |
>= 2.32.0, < 2.32.1 | 2.32.1 |
| GHSA-rcv6-pvrj-4xcg n8n: Authenticated code execution in the n8n Git node |
High EPSS 0.88% |
>= 2.0.0-rc.0, < 2.31.5 | 2.31.5 |
| GHSA-rcv6-pvrj-4xcg n8n: Authenticated code execution in the n8n Git node |
High EPSS 0.88% |
< 1.123.67 | 1.123.67 |
| GHSA-vhf8-cg2h-cg3p n8n: SSRF Protection Bypass via MCP Client Node |
High EPSS 0.40% |
>= 2.32.0, < 2.32.1 | 2.32.1 |
| GHSA-vhf8-cg2h-cg3p n8n: SSRF Protection Bypass via MCP Client Node |
High EPSS 0.40% |
< 2.31.5 | 2.31.5 |
| GHSA-gf29-4f56-r2jf n8n: Git Node fetch/pull/pushTags Operations Bypass Sandbox Path Restriction |
Medium EPSS 0.70% |
< 1.123.67 | 1.123.67 |
| GHSA-gf29-4f56-r2jf n8n: Git Node fetch/pull/pushTags Operations Bypass Sandbox Path Restriction |
Medium EPSS 0.70% |
>= 2.32.0, < 2.32.1 | 2.32.1 |
| GHSA-gf29-4f56-r2jf n8n: Git Node fetch/pull/pushTags Operations Bypass Sandbox Path Restriction |
Medium EPSS 0.70% |
>= 2.0.0-rc.0, < 2.31.5 | 2.31.5 |
| GHSA-64xh-79j6-r5v8 n8n: Bypass "Allowed HTTP Request Domains" Credential Restriction in Multiple AI and LLM Nodes |
Medium EPSS 0.36% |
< 2.31.5 | 2.31.5 |
| GHSA-64xh-79j6-r5v8 n8n: Bypass "Allowed HTTP Request Domains" Credential Restriction in Multiple AI and LLM Nodes |
Medium EPSS 0.36% |
>= 2.32.0, < 2.32.1 | 2.32.1 |
| GHSA-8342-988q-86cr n8n: Account Takeover via Unverified Email Claim in Token Exchange Embed Login |
High EPSS 0.45% |
>= 2.32.0, < 2.32.1 | 2.32.1 |
| GHSA-8342-988q-86cr n8n: Account Takeover via Unverified Email Claim in Token Exchange Embed Login |
High EPSS 0.45% |
< 2.31.5 | 2.31.5 |
| GHSA-725q-c4vp-q4cg Duplicate Advisory: Race Condition in Git Clone Node Allows Authenticated Users to Achieve Remote Code Execution Withdrawn |
High | all versions | No fix yet |
| GHSA-vhcw-f978-xjjg Duplicate Advisory: DOM-Based XSS via Unsandboxed iframe srcdoc in HTML Preview Withdrawn |
High | all versions | No fix yet |
| GHSA-mhvh-gwhr-76pw Duplicate Advisory: Google Service Account Private Key Exposed in JWT Header Withdrawn |
Medium | all versions | No fix yet |
| GHSA-38fj-36m5-783c Duplicate Advisory: Authenticated SSRF via Dynamic Node Parameters Endpoints Allows Internal Network Access Withdrawn |
Medium | all versions | No fix yet |
| GHSA-5vfw-jc4p-fj39 Duplicate Advisory: Member-Level Users Can Execute Other Users' MCP Server Trigger Workflows via Missing OAuth Authorization Check Withdrawn |
Medium | all versions | No fix yet |
| GHSA-fmvg-vhqq-r2mj Duplicate Advisory: Custom Header Credential Values Leaked in Plaintext into LLM Node Execution Data Withdrawn |
Medium | all versions | No fix yet |
| GHSA-w46p-w7w2-fr9g Duplicate Advisory: AI Agents Project Viewer Privilege Escalation via run_node_tool Withdrawn |
High | all versions | No fix yet |
| GHSA-mwq7-vcmc-cm4q Duplicate Advisory: SSO Instance-Role Provisioning Allows Privilege Escalation to Instance Owner Withdrawn |
High | all versions | No fix yet |
| GHSA-88c4-pcqm-3r9p Duplicate Advisory: GraphQL Node Bypasses "Allowed HTTP Request Domains" Restriction Withdrawn |
Medium | all versions | No fix yet |
| GHSA-m7jc-p4hf-xhwq Duplicate Advisory: Legacy Expression Evaluator Sanitizer Bypass Leads to Authenticated Code Execution Withdrawn |
High | all versions | No fix yet |
| GHSA-wq64-hcrf-8m56 Duplicate Advisory: n8n: Privilege Escalation and Code Execution via Full Public API Key Scope Assignment to Token Exchange JWTs Withdrawn |
High | all versions | No fix yet |
| GHSA-h9fm-xcv2-qfw3 Duplicate Advisory: Unauthenticated Endpoint Allows Cancellation of Any User's Active Test Webhook Withdrawn |
Medium | all versions | No fix yet |
| GHSA-h5xr-fqvj-253p Duplicate Advisory: Stored DOM XSS via Resource Locator `cachedResultUrl` Withdrawn |
High | all versions | No fix yet |
| GHSA-9r8p-h6cc-6qhm n8n: Google Service Account Private Key Exposed in JWT Header |
Medium EPSS 0.25% |
< 1.123.64 | 1.123.64 |
| GHSA-9r8p-h6cc-6qhm n8n: Google Service Account Private Key Exposed in JWT Header |
Medium EPSS 0.25% |
>= 2.0.0-rc.0, < 2.29.8 | 2.29.8 |
| GHSA-9r8p-h6cc-6qhm n8n: Google Service Account Private Key Exposed in JWT Header |
Medium EPSS 0.25% |
>= 2.30.0, < 2.30.1 | 2.30.1 |
| GHSA-g3r5-9h93-4j2c n8n: Race Condition in Git Clone Node Allows Authenticated Users to Achieve Remote Code Execution |
High EPSS 0.34% |
>= 2.30.0, < 2.30.1 | 2.30.1 |
| GHSA-g3r5-9h93-4j2c n8n: Race Condition in Git Clone Node Allows Authenticated Users to Achieve Remote Code Execution |
High EPSS 0.34% |
>= 2.0.0-rc.0, < 2.29.8 | 2.29.8 |
| GHSA-g3r5-9h93-4j2c n8n: Race Condition in Git Clone Node Allows Authenticated Users to Achieve Remote Code Execution |
High EPSS 0.34% |
< 1.123.64 | 1.123.64 |
| GHSA-p3rg-hrf9-w9gj n8n: DOM-Based XSS via Unsandboxed iframe srcdoc in HTML Preview |
Medium EPSS 0.30% |
>= 2.0.0-rc.0, < 2.29.8 | 2.29.8 |
| GHSA-p3rg-hrf9-w9gj n8n: DOM-Based XSS via Unsandboxed iframe srcdoc in HTML Preview |
Medium EPSS 0.30% |
< 1.123.64 | 1.123.64 |
| GHSA-p3rg-hrf9-w9gj n8n: DOM-Based XSS via Unsandboxed iframe srcdoc in HTML Preview |
Medium EPSS 0.30% |
>= 2.30.0, < 2.30.1 | 2.30.1 |
| GHSA-gq66-9cw5-j5jm n8n: GraphQL Node Bypasses "Allowed HTTP Request Domains" Restriction |
High EPSS 0.37% |
< 1.123.64 | 1.123.64 |
| GHSA-gq66-9cw5-j5jm n8n: GraphQL Node Bypasses "Allowed HTTP Request Domains" Restriction |
High EPSS 0.37% |
>= 2.0.0, < 2.29.8 | 2.29.8 |
| GHSA-gq66-9cw5-j5jm n8n: GraphQL Node Bypasses "Allowed HTTP Request Domains" Restriction |
High EPSS 0.37% |
>= 2.30.0, < 2.30.1 | 2.30.1 |
| GHSA-777w-rpr6-c52h n8n: Privilege Escalation and Code Execution via Full Public API Key Scope Assignment to Token Exchange JWTs |
High EPSS 0.69% |
< 2.29.8 | 2.29.8 |
| GHSA-777w-rpr6-c52h n8n: Privilege Escalation and Code Execution via Full Public API Key Scope Assignment to Token Exchange JWTs |
High EPSS 0.69% |
>= 2.30.0, < 2.30.1 | 2.30.1 |
| GHSA-q5xf-xhwf-cwqf n8n: Member-Level Users Can Execute Other Users' MCP Server Trigger Workflows via Missing OAuth Authorization Check |
Medium EPSS 0.44% |
< 2.29.8 | 2.29.8 |
| GHSA-q5xf-xhwf-cwqf n8n: Member-Level Users Can Execute Other Users' MCP Server Trigger Workflows via Missing OAuth Authorization Check |
Medium EPSS 0.44% |
>= 2.30.0, < 2.30.1 | 2.30.1 |
| GHSA-9w78-79q7-r4fp n8n: Authenticated SSRF via Dynamic Node Parameters Endpoints Allows Internal Network Access |
Medium EPSS 0.24% |
>= 2.30.0, < 2.30.1 | 2.30.1 |
| GHSA-9w78-79q7-r4fp n8n: Authenticated SSRF via Dynamic Node Parameters Endpoints Allows Internal Network Access |
Medium EPSS 0.24% |
< 1.123.64 | 1.123.64 |
| GHSA-9w78-79q7-r4fp n8n: Authenticated SSRF via Dynamic Node Parameters Endpoints Allows Internal Network Access |
Medium EPSS 0.24% |
>= 2.0.0-rc.0, < 2.29.8 | 2.29.8 |
| GHSA-9wcp-9r3j-383q n8n: Stored DOM XSS via Resource Locator `cachedResultUrl` |
Medium EPSS 0.24% |
< 1.123.64 | 1.123.64 |
| GHSA-9wcp-9r3j-383q n8n: Stored DOM XSS via Resource Locator `cachedResultUrl` |
Medium EPSS 0.24% |
>= 2.30.0, < 2.30.1 | 2.30.1 |
| GHSA-9wcp-9r3j-383q n8n: Stored DOM XSS via Resource Locator `cachedResultUrl` |
Medium EPSS 0.24% |
>= 2.0.0-rc.0, < 2.29.8 | 2.29.8 |
| GHSA-pm35-fqvh-cq5g n8n: Legacy Expression Evaluator Sanitizer Bypass Leads to Authenticated Code Execution |
High EPSS 0.69% |
< 1.123.64 | 1.123.64 |
| GHSA-pm35-fqvh-cq5g n8n: Legacy Expression Evaluator Sanitizer Bypass Leads to Authenticated Code Execution |
High EPSS 0.69% |
>= 2.30.0, < 2.30.1 | 2.30.1 |
| GHSA-pm35-fqvh-cq5g n8n: Legacy Expression Evaluator Sanitizer Bypass Leads to Authenticated Code Execution |
High EPSS 0.69% |
>= 2.0.0-rc.0, < 2.29.8 | 2.29.8 |
| GHSA-fpg6-x68q-5793 n8n: computer-use Shell Sandbox Not Enforced on Linux and Windows |
Critical EPSS 0.58% |
< 2.29.8 | 2.29.8 |
| GHSA-fpg6-x68q-5793 n8n: computer-use Shell Sandbox Not Enforced on Linux and Windows |
Critical EPSS 0.58% |
>= 2.30.0, < 2.30.1 | 2.30.1 |
| GHSA-89gh-3pgc-v5h2 n8n: Custom Header Credential Values Leaked in Plaintext into LLM Node Execution Data |
Medium EPSS 0.48% |
>= 2.0.0-rc.0, < 2.29.8 | 2.29.8 |
| GHSA-89gh-3pgc-v5h2 n8n: Custom Header Credential Values Leaked in Plaintext into LLM Node Execution Data |
Medium EPSS 0.48% |
>= 2.30.0, < 2.30.1 | 2.30.1 |
| GHSA-89gh-3pgc-v5h2 n8n: Custom Header Credential Values Leaked in Plaintext into LLM Node Execution Data |
Medium EPSS 0.48% |
< 1.123.64 | 1.123.64 |
| GHSA-35q8-9mj6-wjmf n8n: SSO Instance-Role Provisioning Allows Privilege Escalation to Instance Owner |
High EPSS 0.45% |
>= 2.0.0-rc.0, < 2.29.8 | 2.29.8 |
| GHSA-35q8-9mj6-wjmf n8n: SSO Instance-Role Provisioning Allows Privilege Escalation to Instance Owner |
High EPSS 0.45% |
>= 2.30.0, < 2.30.1 | 2.30.1 |
| GHSA-35q8-9mj6-wjmf n8n: SSO Instance-Role Provisioning Allows Privilege Escalation to Instance Owner |
High EPSS 0.45% |
< 1.123.64 | 1.123.64 |
| GHSA-x5vx-c2c8-m3w9 n8n: AI Agents Project Viewer Privilege Escalation via run_node_tool |
High EPSS 0.61% |
< 2.29.8 | 2.29.8 |
| GHSA-x5vx-c2c8-m3w9 n8n: AI Agents Project Viewer Privilege Escalation via run_node_tool |
High EPSS 0.61% |
>= 2.30.0, < 2.30.1 | 2.30.1 |
| GHSA-33q9-f52j-gc75 n8n: Unauthenticated Endpoint Allows Cancellation of Any User's Active Test Webhook |
Medium EPSS 0.59% |
< 2.27.4 | 2.27.4 |
| GHSA-3j7v-fhjg-6rh2 Duplicate Advisory: n8n: External Secrets Accessible via Workflow Expressions Outside Credentials Withdrawn |
Medium | all versions | No fix yet |
| GHSA-q6mx-qvhp-fqmg Duplicate Advisory: External Secrets Permission Bypass via Expression Parser Mismatch Withdrawn |
Medium | all versions | No fix yet |
| GHSA-jp7m-xcgx-57qm n8n: External Secrets Permission Bypass via Expression Parser Mismatch |
Medium EPSS 0.44% |
>= 2.28.0, < 2.28.1 | 2.28.1 |
| GHSA-jp7m-xcgx-57qm n8n: External Secrets Permission Bypass via Expression Parser Mismatch |
Medium EPSS 0.44% |
>= 2.0.0-rc.0, < 2.27.4 | 2.27.4 |
| GHSA-jp7m-xcgx-57qm n8n: External Secrets Permission Bypass via Expression Parser Mismatch |
Medium EPSS 0.44% |
< 1.123.61 | 1.123.61 |
| GHSA-2434-3x6q-8r99 n8n: External Secrets Accessible via Workflow Expressions Outside Credentials |
Medium EPSS 0.36% |
>= 2.28.0, < 2.28.1 | 2.28.1 |
| GHSA-2434-3x6q-8r99 n8n: External Secrets Accessible via Workflow Expressions Outside Credentials |
Medium EPSS 0.36% |
< 2.27.4 | 2.27.4 |
| GHSA-2vww-6p9h-5g8j Duplicate Advisory: Authenticated Users Can Exhaust Temporary Disk Storage via Data-Table File Uploads Withdrawn |
Medium | all versions | No fix yet |
| GHSA-w867-jm58-p9pv n8n: Authenticated Users Can Exhaust Temporary Disk Storage via Data-Table File Uploads |
Medium EPSS 0.39% |
< 1.123.58 | 1.123.58 |
| GHSA-w867-jm58-p9pv n8n: Authenticated Users Can Exhaust Temporary Disk Storage via Data-Table File Uploads |
Medium EPSS 0.39% |
>= 2.0.0, < 2.28.0 | 2.28.0 |
| GHSA-q3j5-8vrg-4p9q n8n: Shared Credential Header Leak via HTTP Request Pagination Expression |
Medium EPSS 0.40% |
>= 2.0.0-rc.0, < 2.27.4 | 2.27.4 |
| GHSA-q3j5-8vrg-4p9q n8n: Shared Credential Header Leak via HTTP Request Pagination Expression |
Medium EPSS 0.40% |
>= 2.28.0, < 2.28.1 | 2.28.1 |
| GHSA-q3j5-8vrg-4p9q n8n: Shared Credential Header Leak via HTTP Request Pagination Expression |
Medium EPSS 0.40% |
< 1.123.61 | 1.123.61 |
| GHSA-mq3m-f8x3-579w n8n: Cross-Issuer Token Exchange Account Binding via Subject-Only Identity Resolution |
Medium EPSS 0.27% |
< 2.27.4 | 2.27.4 |
| GHSA-mq3m-f8x3-579w n8n: Cross-Issuer Token Exchange Account Binding via Subject-Only Identity Resolution |
Medium EPSS 0.27% |
>= 2.28.0, < 2.28.1 | 2.28.1 |
| GHSA-h44j-f5r5-ph73 n8n: "Allowed HTTP Request Domains" Restriction Bypass via AI Agents MCP Connector |
Medium EPSS 0.45% |
>= 2.28.0, < 2.28.1 | 2.28.1 |
| GHSA-h44j-f5r5-ph73 n8n: "Allowed HTTP Request Domains" Restriction Bypass via AI Agents MCP Connector |
Medium EPSS 0.45% |
< 2.27.4 | 2.27.4 |
| GHSA-75qm-gp28-rcq9 n8n: Prototype Pollution via Workflow Credentials Leads to Unauthenticated User and Project Enumeration |
High EPSS 0.66% |
< 1.123.61 | 1.123.61 |
| GHSA-75qm-gp28-rcq9 n8n: Prototype Pollution via Workflow Credentials Leads to Unauthenticated User and Project Enumeration |
High EPSS 0.66% |
>= 2.0.0-rc.0, < 2.27.4 | 2.27.4 |
| GHSA-75qm-gp28-rcq9 n8n: Prototype Pollution via Workflow Credentials Leads to Unauthenticated User and Project Enumeration |
High EPSS 0.66% |
>= 2.28.0, < 2.28.1 | 2.28.1 |
| GHSA-2qp2-6frj-p9pq Duplicate Advisory: MySQL v1 Node executeQuery Operation Allows SQL Injection via Unparameterized Expression Interpolation Withdrawn |
High | all versions | No fix yet |
| GHSA-gqcv-rfj6-r29g Duplicate Advisory: Improper Authorization Allows Authenticated Users to Assign Workflows to Folders in Other Projects Withdrawn |
Medium | all versions | No fix yet |
| GHSA-hwmj-qg4v-cvg9 n8n: MySQL v1 Node executeQuery Operation Allows SQL Injection via Unparameterized Expression Interpolation |
High EPSS 0.57% |
< 1.123.61 | 1.123.61 |
| GHSA-hwmj-qg4v-cvg9 n8n: MySQL v1 Node executeQuery Operation Allows SQL Injection via Unparameterized Expression Interpolation |
High EPSS 0.57% |
>= 2.0.0-rc.0, < 2.27.4 | 2.27.4 |
| GHSA-hwmj-qg4v-cvg9 n8n: MySQL v1 Node executeQuery Operation Allows SQL Injection via Unparameterized Expression Interpolation |
High EPSS 0.57% |
>= 2.28.0, < 2.28.1 | 2.28.1 |
| GHSA-2xgm-wc4g-5jvg n8n: Improper Authorization Allows Authenticated Users to Assign Workflows to Folders in Other Projects |
Medium EPSS 0.28% |
< 2.28.0 | 2.28.0 |
| GHSA-664h-gpgq-h6xx n8n: Wrong OAuth Scope on Evaluation Test Runs Endpoints |
Medium EPSS 0.30% |
< 1.123.55 | 1.123.55 |
| GHSA-664h-gpgq-h6xx n8n: Wrong OAuth Scope on Evaluation Test Runs Endpoints |
Medium EPSS 0.30% |
>= 2.0.0-rc.0, < 2.25.7 | 2.25.7 |
| GHSA-664h-gpgq-h6xx n8n: Wrong OAuth Scope on Evaluation Test Runs Endpoints |
Medium EPSS 0.30% |
>= 2.26.0, < 2.26.2 | 2.26.2 |
| GHSA-rm2v-h48j-895m n8n: SecurityScorecard Node Leaks API Token to User-Controlled Host |
High EPSS 0.38% |
>= 2.26.0, < 2.26.1 | 2.26.1 |
| GHSA-rm2v-h48j-895m n8n: SecurityScorecard Node Leaks API Token to User-Controlled Host |
High EPSS 0.38% |
< 1.123.55 | 1.123.55 |
| GHSA-rm2v-h48j-895m n8n: SecurityScorecard Node Leaks API Token to User-Controlled Host |
High EPSS 0.38% |
>= 2.0.0-rc.0, < 2.25.7 | 2.25.7 |
| GHSA-qrx8-25qr-5r7v n8n: MCP Browser HTTP Transport Exposes Unauthenticated Browser-Control Sessions |
Critical EPSS 0.55% |
>= 2.26.0, < 2.26.2 | 2.26.2 |
| GHSA-qrx8-25qr-5r7v n8n: MCP Browser HTTP Transport Exposes Unauthenticated Browser-Control Sessions |
Critical EPSS 0.55% |
< 2.25.7 | 2.25.7 |
| GHSA-2j5h-858j-5mpf n8n: Cross-Tenant Credential Takeover via Dynamic Credentials EE Endpoints |
Critical EPSS 0.37% |
>= 2.26.0, < 2.26.2 | 2.26.2 |
| GHSA-2j5h-858j-5mpf n8n: Cross-Tenant Credential Takeover via Dynamic Credentials EE Endpoints |
Critical EPSS 0.37% |
< 1.123.55 | 1.123.55 |
| GHSA-2j5h-858j-5mpf n8n: Cross-Tenant Credential Takeover via Dynamic Credentials EE Endpoints |
Critical EPSS 0.37% |
>= 2.0.0-rc.0, < 2.25.7 | 2.25.7 |
| GHSA-pmqw-72cg-wx85 n8n: Credential Exfiltration via Permission Bypass |
Critical EPSS 0.39% |
>= 2.26.0, < 2.26.2 | 2.26.2 |
| GHSA-pmqw-72cg-wx85 n8n: Credential Exfiltration via Permission Bypass |
Critical EPSS 0.39% |
< 1.123.55 | 1.123.55 |
| GHSA-pmqw-72cg-wx85 n8n: Credential Exfiltration via Permission Bypass |
Critical EPSS 0.39% |
>= 2.0.0-rc.0, < 2.25.7 | 2.25.7 |
| GHSA-jqpw-qww5-cj4c n8n: Denial of Service via ZIP decompression in webhook workflow |
High EPSS 0.55% |
< 2.24.0 | 2.24.0 |
| GHSA-h3jj-5f3v-3685 n8n: Public API Execution Retry Authorization Bypass |
Medium EPSS 0.29% |
< 2.25.7 | 2.25.7 |
| GHSA-h3jj-5f3v-3685 n8n: Public API Execution Retry Authorization Bypass |
Medium EPSS 0.29% |
>= 2.26.0, < 2.26.2 | 2.26.2 |
| GHSA-jwm3-qcfw-c5pp n8n: Python Code Node AST Validator Bypass |
Medium EPSS 0.33% |
>= 2.26.0, < 2.26.2 | 2.26.2 |
| GHSA-jwm3-qcfw-c5pp n8n: Python Code Node AST Validator Bypass |
Medium EPSS 0.33% |
< 2.25.7 | 2.25.7 |
| GHSA-42h7-m79w-wvg5 n8n: Stored XSS in Chat Trigger Node |
Medium EPSS 0.23% |
< 1.123.55 | 1.123.55 |
| GHSA-42h7-m79w-wvg5 n8n: Stored XSS in Chat Trigger Node |
Medium EPSS 0.23% |
>= 2.0.0-rc.0, < 2.25.7 | 2.25.7 |
| GHSA-42h7-m79w-wvg5 n8n: Stored XSS in Chat Trigger Node |
Medium EPSS 0.23% |
>= 2.26.0, < 2.26.2 | 2.26.2 |
| GHSA-h86q-fx34-gfjr n8n: Reflected XSS via Facebook, WhatsApp, and Microsoft Teams Trigger Webhook Verification Endpoints |
Medium EPSS 0.23% |
< 2.24.0 | 2.24.0 |
| GHSA-x6p3-m6h9-fx7r n8n: Microsoft SQL Node Prototype Pollution |
High EPSS 0.40% |
< 2.24.0 | 2.24.0 |
| GHSA-9c38-2mcm-q7f7 n8n: Merge Node SQL Mode Prototype Pollution |
High EPSS 0.39% |
< 2.25.7 | 2.25.7 |
| GHSA-9c38-2mcm-q7f7 n8n: Merge Node SQL Mode Prototype Pollution |
High EPSS 0.39% |
>= 2.26.0, < 2.26.2 | 2.26.2 |
| GHSA-2vff-hj5x-8gq7 n8n: Prototype Pollution enables confused-deputy execution via public webhooks |
Medium EPSS 0.28% |
< 2.25.7 | 2.25.7 |
| GHSA-2vff-hj5x-8gq7 n8n: Prototype Pollution enables confused-deputy execution via public webhooks |
Medium EPSS 0.28% |
>= 2.26.0, < 2.26.2 | 2.26.2 |
| GHSA-v733-mwr6-fgcm n8n: Same-Origin XSS in Respond to Webhook Node |
Medium EPSS 0.24% |
< 1.123.55 | 1.123.55 |
| GHSA-v733-mwr6-fgcm n8n: Same-Origin XSS in Respond to Webhook Node |
Medium EPSS 0.24% |
>= 2.26.0, < 2.26.2 | 2.26.2 |
| GHSA-v733-mwr6-fgcm n8n: Same-Origin XSS in Respond to Webhook Node |
Medium EPSS 0.24% |
>= 2.0.0-rc.0, < 2.25.7 | 2.25.7 |
| GHSA-jvc7-762p-3743 n8n: Missing Token Validation on Microsoft Agent 365 Trigger and Stripe Nodes |
High EPSS 0.30% |
>= 2.26.0, < 2.26.2 | 2.26.2 |
| GHSA-jvc7-762p-3743 n8n: Missing Token Validation on Microsoft Agent 365 Trigger and Stripe Nodes |
High EPSS 0.30% |
< 2.25.7 | 2.25.7 |
| GHSA-hv7x-3x78-gx53 n8n: Wrong OAuth Scope On Evaluations Test Run Creation Endpoint |
High EPSS 0.28% |
< 1.123.55 | 1.123.55 |
| GHSA-hv7x-3x78-gx53 n8n: Wrong OAuth Scope On Evaluations Test Run Creation Endpoint |
High EPSS 0.28% |
>= 2.0.0-rc.0, < 2.25.7 | 2.25.7 |
| GHSA-hv7x-3x78-gx53 n8n: Wrong OAuth Scope On Evaluations Test Run Creation Endpoint |
High EPSS 0.28% |
>= 2.26.0, < 2.26.2 | 2.26.2 |
| GHSA-jpq7-226w-6cxx n8n: NoSQL Injection in MongoDB Node Find And Replace Operation |
High EPSS 0.34% |
< 2.24.0 | 2.24.0 |
| GHSA-c37g-w77q-m4vp n8n: SQL Injection in Postgres v1/TimesclaeDB Nodes |
Critical EPSS 0.55% |
< 2.25.7 | 2.25.7 |
| GHSA-c37g-w77q-m4vp n8n: SQL Injection in Postgres v1/TimesclaeDB Nodes |
Critical EPSS 0.55% |
>= 2.26.0, < 2.26.2 | 2.26.2 |
| GHSA-5xp3-2w67-427v n8n: Git Node Clone and Push Operations Bypass File Sandbox |
High EPSS 0.54% |
>= 2.0.0-rc.0, < 2.21.8 | 2.21.8 |
| GHSA-5xp3-2w67-427v n8n: Git Node Clone and Push Operations Bypass File Sandbox |
High EPSS 0.54% |
>= 2.22.0, < 2.22.4 | 2.22.4 |
| GHSA-5xp3-2w67-427v n8n: Git Node Clone and Push Operations Bypass File Sandbox |
High EPSS 0.54% |
< 1.123.48 | 1.123.48 |
| GHSA-9pq8-m8gp-4p53 n8n: Python sandbox escape |
High EPSS 0.39% |
< 1.123.48 | 1.123.48 |
| GHSA-9pq8-m8gp-4p53 n8n: Python sandbox escape |
High EPSS 0.39% |
>= 2.0.0-rc.0, < 2.21.8 | 2.21.8 |
| GHSA-9pq8-m8gp-4p53 n8n: Python sandbox escape |
High EPSS 0.39% |
>= 2.22.0, < 2.22.4 | 2.22.4 |
| GHSA-3875-8gcx-7v46 n8n: Credential exfiltration via Allowed HTTP Request Domains Bypass |
Critical EPSS 0.48% |
< 2.20.0 | 2.20.0 |
| GHSA-2vx9-7wpg-88jq n8n: Legacy ExecuteWorkflow Node Bypassed File Path Restrictions |
Medium EPSS 0.33% |
< 2.19.3 | 2.19.3 |
| GHSA-6h4j-wcr9-2vg7 n8n Has a Cross-user Authorization Bypass in Dynamic Credential OAuth Endpoints |
High EPSS 0.35% |
>= 2.21.0, < 2.21.1 | 2.21.1 |
| GHSA-6h4j-wcr9-2vg7 n8n Has a Cross-user Authorization Bypass in Dynamic Credential OAuth Endpoints |
High EPSS 0.35% |
< 1.123.43 | 1.123.43 |
| GHSA-6h4j-wcr9-2vg7 n8n Has a Cross-user Authorization Bypass in Dynamic Credential OAuth Endpoints |
High EPSS 0.35% |
>= 2.0.0-rc.0, < 2.20.7 | 2.20.7 |
| GHSA-mhrx-qhrj-673w n8n Has a Source Control Pull SQL Injection |
Critical EPSS 0.39% |
>= 2.0.0-rc.0, < 2.20.7 | 2.20.7 |
| GHSA-mhrx-qhrj-673w n8n Has a Source Control Pull SQL Injection |
Critical EPSS 0.39% |
>= 2.21.0, < 2.21.1 | 2.21.1 |
| GHSA-mhrx-qhrj-673w n8n Has a Source Control Pull SQL Injection |
Critical EPSS 0.39% |
< 1.123.43 | 1.123.43 |
| GHSA-wrwr-h859-xh2r n8n Has an XML Node Prototype Pollution Patch Bypass |
Critical EPSS 0.54% |
>= 2.0.0-rc.0, < 2.20.7 | 2.20.7 |
| GHSA-wrwr-h859-xh2r n8n Has an XML Node Prototype Pollution Patch Bypass |
Critical EPSS 0.54% |
< 1.123.43 | 1.123.43 |
| GHSA-wrwr-h859-xh2r n8n Has an XML Node Prototype Pollution Patch Bypass |
Critical EPSS 0.54% |
>= 2.21.0, < 2.22.1 | 2.22.1 |
| GHSA-57g9-58c2-xjg3 n8n Has an Arbitrary File Read via Git Node |
High EPSS 0.53% |
>= 2.21.0, < 2.22.1 | 2.22.1 |
| GHSA-57g9-58c2-xjg3 n8n Has an Arbitrary File Read via Git Node |
High EPSS 0.53% |
>= 2.0.0-rc.0, < 2.20.7 | 2.20.7 |
| GHSA-57g9-58c2-xjg3 n8n Has an Arbitrary File Read via Git Node |
High EPSS 0.53% |
< 1.123.43 | 1.123.43 |
| GHSA-c8xv-5998-g76h n8n: HTTP Request Node Pagination Prototype Pollution to RCE |
Critical EPSS 0.53% |
>= 2.0.0-rc.0, < 2.20.7 | 2.20.7 |
| GHSA-c8xv-5998-g76h n8n: HTTP Request Node Pagination Prototype Pollution to RCE |
Critical EPSS 0.53% |
< 1.123.43 | 1.123.43 |
| GHSA-c8xv-5998-g76h n8n: HTTP Request Node Pagination Prototype Pollution to RCE |
Critical EPSS 0.53% |
>= 2.21.0, < 2.22.1 | 2.22.1 |
| GHSA-hqr4-h3xv-9m3r n8n has XML Node Prototype Pollution that to RCE |
High EPSS 0.48% |
>= 2.18.0, < 2.18.1 | 2.18.1 |
| GHSA-hqr4-h3xv-9m3r n8n has XML Node Prototype Pollution that to RCE |
High EPSS 0.48% |
< 1.123.32 | 1.123.32 |
| GHSA-hqr4-h3xv-9m3r n8n has XML Node Prototype Pollution that to RCE |
High EPSS 0.48% |
>= 2.17.0, < 2.17.4 | 2.17.4 |
| GHSA-q5f4-99jv-pgg5 n8n has Prototype Pollution in XML Webhook Body Parser that Leads to RCE |
High EPSS 0.85% |
>= 2.17.0, < 2.17.4 | 2.17.4 |
| GHSA-q5f4-99jv-pgg5 n8n has Prototype Pollution in XML Webhook Body Parser that Leads to RCE |
High EPSS 0.85% |
< 1.123.32 | 1.123.32 |
| GHSA-q5f4-99jv-pgg5 n8n has Prototype Pollution in XML Webhook Body Parser that Leads to RCE |
High EPSS 0.85% |
>= 2.18.0, < 2.18.1 | 2.18.1 |
| GHSA-537j-gqpc-p7fq n8n Vulnerable to XSS via MCP OAuth client |
Critical EPSS 0.33% |
< 1.123.32 | 1.123.32 |
| GHSA-537j-gqpc-p7fq n8n Vulnerable to XSS via MCP OAuth client |
Critical EPSS 0.33% |
>= 2.17.0, < 2.17.4 | 2.17.4 |
| GHSA-537j-gqpc-p7fq n8n Vulnerable to XSS via MCP OAuth client |
Critical EPSS 0.33% |
>= 2.18.0, < 2.18.1 | 2.18.1 |
| GHSA-r4v6-9fqc-w5jr n8n's Credential Authorization Bypass in dynamic-node-parameters Allows Foreign API Key Replay |
High EPSS 0.26% |
>= 2.17.0, < 2.17.5 | 2.17.5 |
| GHSA-r4v6-9fqc-w5jr n8n's Credential Authorization Bypass in dynamic-node-parameters Allows Foreign API Key Replay |
High EPSS 0.26% |
< 1.123.33 | 1.123.33 |
| GHSA-44v6-jhgm-p3m4 n8n has a Python Task Runner Sandbox Escape Vulnerability |
High EPSS 0.38% |
< 1.123.32 | 1.123.32 |
| GHSA-44v6-jhgm-p3m4 n8n has a Python Task Runner Sandbox Escape Vulnerability |
High EPSS 0.38% |
>= 2.18.0, < 2.18.1 | 2.18.1 |
| GHSA-44v6-jhgm-p3m4 n8n has a Python Task Runner Sandbox Escape Vulnerability |
High EPSS 0.38% |
>= 2.17.0, < 2.17.4 | 2.17.4 |
| GHSA-756q-gq9h-fp22 n8n has Public API Variables IDOR that Allows Cross-Project Secret Disclosure |
Medium EPSS 0.20% |
>= 2.18.0, < 2.18.1 | 2.18.1 |
| GHSA-756q-gq9h-fp22 n8n has Public API Variables IDOR that Allows Cross-Project Secret Disclosure |
Medium EPSS 0.20% |
>= 2.0.0, < 2.17.4 | 2.17.4 |
| GHSA-756q-gq9h-fp22 n8n has Public API Variables IDOR that Allows Cross-Project Secret Disclosure |
Medium EPSS 0.20% |
< 1.123.32 | 1.123.32 |
| GHSA-49m9-pgww-9vq6 n8n Vulnerable to Unauthenticated Denial of Service via MCP Client Registration |
High EPSS 0.49% |
< 1.123.32 | 1.123.32 |
| GHSA-49m9-pgww-9vq6 n8n Vulnerable to Unauthenticated Denial of Service via MCP Client Registration |
High EPSS 0.49% |
>= 2.18.0, < 2.18.1 | 2.18.1 |
| GHSA-49m9-pgww-9vq6 n8n Vulnerable to Unauthenticated Denial of Service via MCP Client Registration |
High EPSS 0.49% |
>= 2.0.0, < 2.17.4 | 2.17.4 |
| GHSA-f77h-j2v7-g6mw n8n Vulnerable to Hijacking of Unauthenticated Chat Execution |
Medium EPSS 0.38% |
< 1.123.32 | 1.123.32 |
| GHSA-f77h-j2v7-g6mw n8n Vulnerable to Hijacking of Unauthenticated Chat Execution |
Medium EPSS 0.38% |
>= 2.0.0, < 2.17.4 | 2.17.4 |
| GHSA-f77h-j2v7-g6mw n8n Vulnerable to Hijacking of Unauthenticated Chat Execution |
Medium EPSS 0.38% |
>= 2.18.0, < 2.18.1 | 2.18.1 |
| GHSA-mp4j-h6gh-f6mp n8n has SQL Injection in SeaTable Node |
High EPSS 0.34% |
>= 2.18.0, < 2.18.1 | 2.18.1 |
| GHSA-mp4j-h6gh-f6mp n8n has SQL Injection in SeaTable Node |
High EPSS 0.34% |
< 1.123.32 | 1.123.32 |
| GHSA-mp4j-h6gh-f6mp n8n has SQL Injection in SeaTable Node |
High EPSS 0.34% |
>= 2.0.0, < 2.17.4 | 2.17.4 |
| GHSA-f6x8-65q6-j9m9 n8n has Open Redirect in MCP OAuth Consent Flow |
Medium EPSS 0.18% |
< 1.123.32 | 1.123.32 |
| GHSA-f6x8-65q6-j9m9 n8n has Open Redirect in MCP OAuth Consent Flow |
Medium EPSS 0.18% |
>= 2.18.0, < 2.18.1 | 2.18.1 |
| GHSA-f6x8-65q6-j9m9 n8n has Open Redirect in MCP OAuth Consent Flow |
Medium EPSS 0.18% |
>= 2.0.0, < 2.17.4 | 2.17.4 |
| GHSA-r6jc-mpqw-m755 n8n has SQL Injection in Oracle Database Node via Limit Field |
Critical EPSS 0.33% |
< 1.123.32 | 1.123.32 |
| GHSA-r6jc-mpqw-m755 n8n has SQL Injection in Oracle Database Node via Limit Field |
Critical EPSS 0.33% |
>= 2.18.0, < 2.18.1 | 2.18.1 |
| GHSA-r6jc-mpqw-m755 n8n has SQL Injection in Oracle Database Node via Limit Field |
Critical EPSS 0.33% |
>= 2.0.0, < 2.17.4 | 2.17.4 |
| GHSA-hp3c-vfpm-q4f7 n8n has SQL Injection in Snowflake and MySQL Nodes |
High EPSS 0.25% |
>= 2.18.0, < 2.18.1 | 2.18.1 |
| GHSA-hp3c-vfpm-q4f7 n8n has SQL Injection in Snowflake and MySQL Nodes |
High EPSS 0.25% |
>= 2.0.0, < 2.17.4 | 2.17.4 |
| GHSA-hp3c-vfpm-q4f7 n8n has SQL Injection in Snowflake and MySQL Nodes |
High EPSS 0.25% |
< 1.123.32 | 1.123.32 |
| GHSA-364x-8g5j-x2pr n8n has XSS in its Credential Management Flow |
Medium EPSS 0.24% |
< 2.6.4 | 2.6.4 |
| GHSA-364x-8g5j-x2pr n8n has XSS in its Credential Management Flow |
Medium EPSS 0.24% |
>= 2.7.0, < 2.8.0 | 2.8.0 |
| GHSA-3c7f-5hgj-h279 n8n has XSS in Chat Trigger Node through Custom CSS |
Medium EPSS 0.25% |
>= 2.14.0, < 2.14.1 | 2.14.1 |
| GHSA-3c7f-5hgj-h279 n8n has XSS in Chat Trigger Node through Custom CSS |
Medium EPSS 0.25% |
>= 2.0.0-rc.0, < 2.13.3 | 2.13.3 |
| GHSA-3c7f-5hgj-h279 n8n has XSS in Chat Trigger Node through Custom CSS |
Medium EPSS 0.25% |
< 1.123.27 | 1.123.27 |
| GHSA-w673-8fjw-457c n8n: Authenticated XSS and Open Redirect via Form Node |
Medium EPSS 0.24% |
>= 2.0.0-rc.0, < 2.10.4 | 2.10.4 |
| GHSA-w673-8fjw-457c n8n: Authenticated XSS and Open Redirect via Form Node |
Medium EPSS 0.24% |
>= 2.11.0, < 2.12.0 | 2.12.0 |
| GHSA-w673-8fjw-457c n8n: Authenticated XSS and Open Redirect via Form Node |
Medium EPSS 0.24% |
< 1.123.24 | 1.123.24 |
| GHSA-q4fm-pjq6-m63g n8n has a Stored XSS Vulnerability in its Form Trigger |
Medium EPSS 0.24% |
< 1.123.25 | 1.123.25 |
| GHSA-q4fm-pjq6-m63g n8n has a Stored XSS Vulnerability in its Form Trigger |
Medium EPSS 0.24% |
>= 2.0.0-rc.0, < 2.11.2 | 2.11.2 |
| GHSA-w83q-mcmx-mh42 n8n Vulnerable to LDAP Filter Injection in LDAP Node |
Medium EPSS 0.25% |
>= 2.14.0, < 2.14.1 | 2.14.1 |
| GHSA-w83q-mcmx-mh42 n8n Vulnerable to LDAP Filter Injection in LDAP Node |
Medium EPSS 0.25% |
>= 2.0.0-rc.0, < 2.13.3 | 2.13.3 |
| GHSA-w83q-mcmx-mh42 n8n Vulnerable to LDAP Filter Injection in LDAP Node |
Medium EPSS 0.25% |
< 1.123.27 | 1.123.27 |
| GHSA-qfc3-hm4j-7q77 n8n Vulnerable to XSS via Binary Data Inline HTML Rendering |
Critical EPSS 0.25% |
< 1.123.27 | 1.123.27 |
| GHSA-qfc3-hm4j-7q77 n8n Vulnerable to XSS via Binary Data Inline HTML Rendering |
Critical EPSS 0.25% |
>= 2.0.0-rc.0, < 2.13.3 | 2.13.3 |
| GHSA-qfc3-hm4j-7q77 n8n Vulnerable to XSS via Binary Data Inline HTML Rendering |
Critical EPSS 0.25% |
>= 2.14.0, < 2.14.1 | 2.14.1 |
| GHSA-43v7-fp2v-68f6 n8n's Source Control SSH Configuration Uses StrictHostKeyChecking=no |
High EPSS 0.29% |
< 2.5.0 | 2.5.0 |
| GHSA-fxcw-h3qj-8m8p n8n Has External Secrets Authorization Bypass in Credential Saving |
Medium EPSS 0.27% |
< 1.123.23 | 1.123.23 |
| GHSA-fxcw-h3qj-8m8p n8n Has External Secrets Authorization Bypass in Credential Saving |
Medium EPSS 0.27% |
>= 2.0.0-rc.0, < 2.6.4 | 2.6.4 |
| GHSA-vpgc-2f6g-7w7x n8n Has Authorization Bypass in OAuth Callback via N8N_SKIP_AUTH_ON_OAUTH_CALLBACK |
Medium EPSS 0.18% |
< 2.8.0 | 2.8.0 |
| GHSA-98c2-4cr3-4jc3 n8n has SQL Injection in Data Table Node via orderByColumn Expression |
High EPSS 0.43% |
< 1.123.26 | 1.123.26 |
| GHSA-98c2-4cr3-4jc3 n8n has SQL Injection in Data Table Node via orderByColumn Expression |
High EPSS 0.43% |
>= 2.0.0-rc.0, < 2.13.3 | 2.13.3 |
| GHSA-98c2-4cr3-4jc3 n8n has SQL Injection in Data Table Node via orderByColumn Expression |
High EPSS 0.43% |
>= 2.14.0, < 2.14.1 | 2.14.1 |
| GHSA-mxrg-77hm-89hv n8n: Prototype Pollution in XML and GSuiteAdmin node parameters lead to RCE |
High EPSS 0.80% |
>= 2.14.0, < 2.14.1 | 2.14.1 |
| GHSA-mxrg-77hm-89hv n8n: Prototype Pollution in XML and GSuiteAdmin node parameters lead to RCE |
High EPSS 0.80% |
< 1.123.27 | 1.123.27 |
| GHSA-mxrg-77hm-89hv n8n: Prototype Pollution in XML and GSuiteAdmin node parameters lead to RCE |
High EPSS 0.80% |
>= 2.0.0-rc.0, < 2.13.3 | 2.13.3 |
| GHSA-c545-x2rh-82fc n8n: LDAP Email-Based Account Linking Allows Privilege Escalation and Account Takeover |
High EPSS 0.33% |
>= 2.0.0-rc.0, < 2.4.0 | 2.4.0 |
| GHSA-c545-x2rh-82fc n8n: LDAP Email-Based Account Linking Allows Privilege Escalation and Account Takeover |
High EPSS 0.33% |
< 1.121.0 | 1.121.0 |
| GHSA-m63j-689w-3j35 n8n is Vulnerable to Credential Theft via Name-Based Resolution and Permission Checker Bypass in Community Edition |
Medium EPSS 0.40% |
>= 2.14.0, < 2.14.1 | 2.14.1 |
| GHSA-m63j-689w-3j35 n8n is Vulnerable to Credential Theft via Name-Based Resolution and Permission Checker Bypass in Community Edition |
Medium EPSS 0.40% |
>= 2.0.0-rc.0, < 2.13.3 | 2.13.3 |
| GHSA-m63j-689w-3j35 n8n is Vulnerable to Credential Theft via Name-Based Resolution and Permission Checker Bypass in Community Edition |
Medium EPSS 0.40% |
< 1.123.27 | 1.123.27 |
| GHSA-58qr-rcgv-642v n8n has Multiple Remote Code Execution Vulnerabilities in Merge Node AlaSQL SQL Mode |
High EPSS 0.97% |
>= 2.14.0, < 2.14.1 | 2.14.1 |
| GHSA-58qr-rcgv-642v n8n has Multiple Remote Code Execution Vulnerabilities in Merge Node AlaSQL SQL Mode |
High EPSS 0.97% |
< 1.123.27 | 1.123.27 |
| GHSA-58qr-rcgv-642v n8n has Multiple Remote Code Execution Vulnerabilities in Merge Node AlaSQL SQL Mode |
High EPSS 0.97% |
>= 2.0.0-rc.0, < 2.13.3 | 2.13.3 |
| GHSA-xvh5-5qg4-x9qp n8n has In-Process Memory Disclosure in its Task Runner |
Medium EPSS 0.27% |
>= 2.10.0, < 2.10.1 | 2.10.1 |
| GHSA-xvh5-5qg4-x9qp n8n has In-Process Memory Disclosure in its Task Runner |
Medium EPSS 0.27% |
< 1.123.22 | 1.123.22 |
| GHSA-xvh5-5qg4-x9qp n8n has In-Process Memory Disclosure in its Task Runner |
Medium EPSS 0.27% |
>= 2.0.0-rc.0, < 2.9.3 | 2.9.3 |
| GHSA-38c7-23hj-2wgq n8n has Webhook Forgery on Zendesk Trigger Node |
Medium EPSS 0.31% |
< 1.123.18 | 1.123.18 |
| GHSA-38c7-23hj-2wgq n8n has Webhook Forgery on Zendesk Trigger Node |
Medium EPSS 0.31% |
>= 2.0.0, < 2.6.2 | 2.6.2 |
| GHSA-fvfv-ppw4-7h2w n8n has a Guardrail Node Bypass |
Low EPSS 0.47% |
< 2.10.0 | 2.10.0 |
| GHSA-jh8h-6c9q-7gmw n8n has an Authentication Bypass in its Chat Trigger Node |
Medium EPSS 0.33% |
< 1.123.22 | 1.123.22 |
| GHSA-jh8h-6c9q-7gmw n8n has an Authentication Bypass in its Chat Trigger Node |
Medium EPSS 0.33% |
>= 2.0.0, < 2.9.3 | 2.9.3 |
| GHSA-jh8h-6c9q-7gmw n8n has an Authentication Bypass in its Chat Trigger Node |
Medium EPSS 0.33% |
>= 2.10.0, < 2.10.1 | 2.10.1 |
| GHSA-vjf3-2gpj-233v n8n has an SSO Enforcement Bypass in its Self-Service Settings API |
High EPSS 0.38% |
< 2.8.0 | 2.8.0 |
| GHSA-mqpr-49jj-32rc n8n: Webhook Forgery on Github Webhook Trigger |
Medium EPSS 0.31% |
>= 2.0.0, < 2.5.0 | 2.5.0 |
| GHSA-mqpr-49jj-32rc n8n: Webhook Forgery on Github Webhook Trigger |
Medium EPSS 0.31% |
< 1.123.15 | 1.123.15 |
| GHSA-f3f2-mcxc-pwjx n8n: SQL Injection in MySQL, PostgreSQL, and Microsoft SQL nodes |
Critical EPSS 0.38% |
< 2.4.0 | 2.4.0 |
| GHSA-2p9h-rqjw-gm92 n8n Vulnerable to Stored XSS via Various Nodes |
Medium EPSS 0.22% |
>= 2.10.0, < 2.10.1 | 2.10.1 |
| GHSA-2p9h-rqjw-gm92 n8n Vulnerable to Stored XSS via Various Nodes |
Medium EPSS 0.22% |
< 1.123.22 | 1.123.22 |
| GHSA-2p9h-rqjw-gm92 n8n Vulnerable to Stored XSS via Various Nodes |
Medium EPSS 0.22% |
>= 2.0.0, < 2.9.3 | 2.9.3 |
| GHSA-vpcf-gvg4-6qwr n8n: Expression Sandbox Escape Leads to RCE |
Critical EPSS 10.72% |
< 1.123.22 | 1.123.22 |
| GHSA-vpcf-gvg4-6qwr n8n: Expression Sandbox Escape Leads to RCE |
Critical EPSS 10.72% |
>= 2.10.0, < 2.10.1 | 2.10.1 |
| GHSA-vpcf-gvg4-6qwr n8n: Expression Sandbox Escape Leads to RCE |
Critical EPSS 10.72% |
>= 2.0.0, < 2.9.3 | 2.9.3 |
| GHSA-vpcf-gvg4-6qwr n8n: Expression Sandbox Escape Leads to RCE |
Critical EPSS 10.72% |
>= 2.10.0, < 2.10.1 | 2.10.1 |
| GHSA-vpcf-gvg4-6qwr n8n: Expression Sandbox Escape Leads to RCE |
Critical EPSS 10.72% |
>= 2.0.0, < 2.9.3 | 2.9.3 |
| GHSA-vpcf-gvg4-6qwr n8n: Expression Sandbox Escape Leads to RCE |
Critical EPSS 10.72% |
< 1.123.22 | 1.123.22 |
| GHSA-x2mw-7j39-93xq n8n has Arbitrary Command Execution via File Write and Git Operations |
High EPSS 0.82% |
>= 2.0.0, < 2.2.0 | 2.2.0 |
| GHSA-x2mw-7j39-93xq n8n has Arbitrary Command Execution via File Write and Git Operations |
High EPSS 0.82% |
< 1.123.8 | 1.123.8 |
| GHSA-wxx7-mcgf-j869 n8n has Potential Remote Code Execution via Merge Node |
High EPSS 0.88% |
>= 2.0.0, < 2.9.3 | 2.9.3 |
| GHSA-wxx7-mcgf-j869 n8n has Potential Remote Code Execution via Merge Node |
High EPSS 0.88% |
< 1.123.22 | 1.123.22 |
| GHSA-wxx7-mcgf-j869 n8n has Potential Remote Code Execution via Merge Node |
High EPSS 0.88% |
>= 2.10.0, < 2.10.1 | 2.10.1 |
| GHSA-jjpj-p2wh-qf23 n8n has a Sandbox Escape in its JavaScript Task Runner |
Critical EPSS 0.79% |
>= 2.0.0, < 2.9.3 | 2.9.3 |
| GHSA-jjpj-p2wh-qf23 n8n has a Sandbox Escape in its JavaScript Task Runner |
Critical EPSS 0.79% |
< 1.123.22 | 1.123.22 |
| GHSA-jjpj-p2wh-qf23 n8n has a Sandbox Escape in its JavaScript Task Runner |
Critical EPSS 0.79% |
>= 2.10.0, < 2.10.1 | 2.10.1 |
| GHSA-mmgg-m5j7-f83h n8n has Arbitrary File Read via Python Code Node Sandbox Escape |
Critical EPSS 0.41% |
< 1.123.22 | 1.123.22 |
| GHSA-mmgg-m5j7-f83h n8n has Arbitrary File Read via Python Code Node Sandbox Escape |
Critical EPSS 0.41% |
>= 2.10.0, < 2.10.1 | 2.10.1 |
| GHSA-mmgg-m5j7-f83h n8n has Arbitrary File Read via Python Code Node Sandbox Escape |
Critical EPSS 0.41% |
>= 2.0.0, < 2.9.3 | 2.9.3 |
| GHSA-75g8-rv7v-32f7 n8n has Unauthenticated Expression Evaluation via Form Node |
Critical EPSS 1.39% |
>= 2.10.0, < 2.10.1 | 2.10.1 |
| GHSA-75g8-rv7v-32f7 n8n has Unauthenticated Expression Evaluation via Form Node |
Critical EPSS 1.39% |
>= 2.0.0, < 2.9.3 | 2.9.3 |
| GHSA-75g8-rv7v-32f7 n8n has Unauthenticated Expression Evaluation via Form Node |
Critical EPSS 1.39% |
< 1.123.22 | 1.123.22 |
| GHSA-2xcx-75h9-vr9h n8n's domain allowlist bypass enables credential exfiltration |
Medium EPSS 0.31% |
< 1.121.0 | 1.121.0 |
| GHSA-7c4h-vh2m-743m n8n Vulnerable to Command Injection in Community Package Installation |
High EPSS 1.54% |
>= 0.187.0, < 1.120.3 | 1.120.3 |
| GHSA-8398-gmmx-564h n8n has a Python sandbox escape |
Critical EPSS 0.58% |
< 2.4.8 | 2.4.8 |
| GHSA-hv53-3329-vmrm n8n Merge Node has Arbitrary File Write leading to RCE |
High EPSS 0.73% |
>= 2.0.0, < 2.4.0 | 2.4.0 |
| GHSA-hv53-3329-vmrm n8n Merge Node has Arbitrary File Write leading to RCE |
High EPSS 0.73% |
< 1.118.0 | 1.118.0 |
| GHSA-m82q-59gv-mcr9 n8n Vulnerable to Arbitrary File Write on Remote Systems via SSH Node |
High EPSS 1.86% |
>= 2.0.0, < 2.4.0 | 2.4.0 |
| GHSA-m82q-59gv-mcr9 n8n Vulnerable to Arbitrary File Write on Remote Systems via SSH Node |
High EPSS 1.86% |
< 1.123.12 | 1.123.12 |
| GHSA-qpq4-pw7f-pp8w n8n Has Stored Cross-site Scripting via Markdown Rendering in Workflow UI |
Medium EPSS 0.21% |
< 1.123.9 | 1.123.9 |
| GHSA-qpq4-pw7f-pp8w n8n Has Stored Cross-site Scripting via Markdown Rendering in Workflow UI |
Medium EPSS 0.21% |
>= 2.0.0, < 2.2.1 | 2.2.1 |
| GHSA-9g95-qf3f-ggrw n8n has OS Command Injection in Git Node |
Critical EPSS 0.62% |
< 1.123.10 | 1.123.10 |
| GHSA-9g95-qf3f-ggrw n8n has OS Command Injection in Git Node |
Critical EPSS 0.62% |
>= 2.0.0, < 2.5.0 | 2.5.0 |
| GHSA-gfvg-qv54-r4pc n8n's Improper File Access Controls Allow Arbitrary File Read by Authenticated Users |
Critical EPSS 0.33% |
>= 2.0.0, < 2.5.0 | 2.5.0 |
| GHSA-gfvg-qv54-r4pc n8n's Improper File Access Controls Allow Arbitrary File Read by Authenticated Users |
Critical EPSS 0.33% |
< 1.123.18 | 1.123.18 |
| GHSA-825q-w924-xhgx n8n's Improper CSP Enforcement in Webhook Responses May Allow Stored XSS |
Medium EPSS 0.26% |
>= 1.123.0, < 1.123.2 | 1.123.2 |
| GHSA-825q-w924-xhgx n8n's Improper CSP Enforcement in Webhook Responses May Allow Stored XSS |
Medium EPSS 0.26% |
< 1.122.5 | 1.122.5 |
| GHSA-6cqr-8cfr-67f8 n8n Has Expression Escape Vulnerability Leading to RCE |
Critical EPSS 1.56% |
< 1.123.17 | 1.123.17 |
| GHSA-6cqr-8cfr-67f8 n8n Has Expression Escape Vulnerability Leading to RCE |
Critical EPSS 1.56% |
>= 2.0.0, < 2.5.2 | 2.5.2 |
| GHSA-49mx-fj45-q3p6 n8n's Unsafe Buffer Allocation Allows In-Process Memory Disclosure in Task Runner |
High EPSS 0.40% |
>= 1.65.0, < 1.114.3 | 1.114.3 |
| GHSA-5xrp-6693-jjx9 n8n Unsafe Workflow Expression Evaluation Allows Remote Code Execution |
Critical EPSS 20.40% |
>= 2.5.0, < 2.5.1 | 2.5.1 |
| GHSA-5xrp-6693-jjx9 n8n Unsafe Workflow Expression Evaluation Allows Remote Code Execution |
Critical EPSS 20.40% |
>= 2.0.0, < 2.4.5 | 2.4.5 |
| GHSA-5xrp-6693-jjx9 n8n Unsafe Workflow Expression Evaluation Allows Remote Code Execution |
Critical EPSS 20.40% |
< 1.123.17 | 1.123.17 |
| GHSA-w96v-gf22-crwp n8n: Webhook Node IP Whitelist Bypass via Partial String Matching |
Medium EPSS 0.30% |
>= 1.36.0, < 2.2.0 | 2.2.0 |
| GHSA-jf52-3f2h-h9j5 n8n's Missing Stripe-Signature Verification Allows Unauthenticated Forged Webhooks |
Medium EPSS 0.47% |
>= 0.150.0, < 2.2.2 | 2.2.2 |
| GHSA-v4pr-fm98-w9pg n8n Vulnerable to Unauthenticated File Access via Improper Webhook Request Handling |
Critical EPSS 78.19% |
>= 1.65.0, < 1.121.0 | 1.121.0 |
| GHSA-v364-rw7m-3263 n8n Vulnerable to RCE via Arbitrary File Write |
Critical EPSS 5.45% |
>= 0.123.0, < 1.121.3 | 1.121.3 |
| GHSA-j4p8-h8mh-rh8q Self-hosted n8n has Legacy Code node that enables arbitrary file read/write |
Medium EPSS 0.27% |
>= 1.2.1, < 2.0.0 | 2.0.0 |
| GHSA-62r4-hw23-cc8v n8n Vulnerable to Arbitrary Command Execution in Pyodide based Python Code Node |
Critical EPSS 13.17% |
>= 1.0.0, < 2.0.0 | 2.0.0 |
| GHSA-58jc-rcg5-95f3 n8n's Possible Stored XSS in "Respond to Webhook" Node May Execute Outside iframe Sandbox |
Medium EPSS 0.24% |
< 1.114.0 | 1.114.0 |
| GHSA-v98v-ff95-f3cp n8n Vulnerable to Remote Code Execution via Expression Injection Known exploited |
High EPSS 98.99% |
>= 1.121.0, < 1.121.1 | 1.121.1 |
| GHSA-v98v-ff95-f3cp n8n Vulnerable to Remote Code Execution via Expression Injection Known exploited |
High EPSS 98.99% |
>= 0.211.0, < 1.120.4 | 1.120.4 |
| GHSA-v98v-ff95-f3cp n8n Vulnerable to Remote Code Execution via Expression Injection Known exploited |
High EPSS 98.99% |
>= 0.211.0, < 1.120.4 | 1.120.4 |
| GHSA-v98v-ff95-f3cp n8n Vulnerable to Remote Code Execution via Expression Injection Known exploited |
High EPSS 98.99% |
>= 1.121.0, < 1.121.1 | 1.121.1 |
| GHSA-wpqc-h9wp-chmq n8n vulnerable to Remote Code Execution via Git Node Custom Pre-Commit Hook |
High EPSS 0.66% |
>= 0.123.1, < 1.119.2 | 1.119.2 |
| GHSA-xgp7-7qjq-vg47 n8n Vulnerable to Remote Code Execution via Git Node Pre-Commit Hook |
High EPSS 0.81% |
< 1.113.0 | 1.113.0 |
| GHSA-365g-vjw2-grx8 n8n: Execute Command Node Allows Authenticated Users to Run Arbitrary Commands on Host |
High EPSS 0.57% |
<= 1.114.4 | No fix yet |
| GHSA-mvh4-2cm2-6hpg Stored XSS in n8n LangChain Chat Trigger Node via initialMessages Parameter |
Medium EPSS 0.24% |
>= 1.24.0, < 1.107.0 | 1.107.0 |
| GHSA-ggjm-f3g4-rwmm n8n symlink traversal vulnerability in "Read/Write File" node allows access to restricted files |
Medium EPSS 0.49% |
< 1.106.0 | 1.106.0 |
| GHSA-hfmv-hhh3-43f2 Stored XSS in n8n Form Trigger allows Account Takeover via injected iframe and video/source |
Medium EPSS 0.39% |
>= 1.77.0, < 1.98.2 | 1.98.2 |
| GHSA-gq57-v332-7666 n8n is vulnerable to Improper Authorization through its `/stop` endpoint |
Medium EPSS 0.37% |
< 1.99.1 | 1.99.1 |
| GHSA-pr9r-gxgp-9rm8 n8n Vulnerable to Denial of Service via Malformed Binary Data Requests |
Medium EPSS 0.47% |
< 1.99.0 | 1.99.0 |
| GHSA-5vj6-wjr7-5v9f n8n allows open redirects via the /signin endpoint |
Medium EPSS 0.23% |
< 1.98.0 | 1.98.0 |
| GHSA-c8hm-hr8h-5xjw n8n Vulnerable to Stored XSS through Attachments View Endpoint |
Medium EPSS 0.27% |
< 1.90.0 | 1.90.0 |
| GHSA-r9xw-p7wj-w792 n8n Information Disclosure vulnerability |
High EPSS 1.22% |
< 0.216.1 | 0.216.1 |
| GHSA-97cp-mr4m-9mcf n8n Privilege Escalation vulnerability |
High EPSS 1.22% |
< 0.216.1 | 0.216.1 |
| GHSA-p58x-7733-vp9m n8n Directory Traversal vulnerability |
Medium EPSS 2.32% |
< 0.216.1 | 0.216.1 |
MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.
Check your repos with MergeHarbor