{"data":{"id":"528f771f-68a2-44fe-b004-70e6dec5ab0c","title":"GHSA-9wcp-9r3j-383q: n8n: Stored DOM XSS via Resource Locator `cachedResultUrl`","summary":"n8n's Resource Locator passes the workflow-persisted `cachedResultUrl` to `window.open()` without scheme validation. When a victim opens a crafted workflow and interacts with external links, the JavaScript payload runs in the victim's browser.","solution":"Fixed in n8n versions 1.123.64, 2.29.8, and 2.30.1; users should upgrade to one of these versions or later. If upgrading is not immediately possible, restrict workflow creation and editing permissions to fully trusted users only, and audit existing workflows for unexpected `cachedResultUrl` values containing non-HTTP(S) schemes. These workarounds do not fully remediate the risk and should only be used as short-term measures.","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-9wcp-9r3j-383q","publishedAt":"2026-07-22T17:59:07.000Z","cveId":"CVE-2026-65592","cweIds":null,"cvssScore":null,"cvssSeverity":"high","severity":"high","attackType":["other"],"issueType":"vulnerability","affectedPackages":["n8n@>= 2.0.0-rc.0, < 2.29.8 (fixed: 2.29.8)","n8n@>= 2.30.0, < 2.30.1 (fixed: 2.30.1)","n8n@< 1.123.64 (fixed: 1.123.64)"],"affectedPackageNames":["n8n"],"affectedPackageRefs":["npm:n8n"],"affectedVendors":[],"affectedVendorsRaw":["n8n"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00243,"epssCheckedAt":"2026-11-13T00:12:56.479Z","kevDateAdded":null,"advisoryAliases":["GHSA-9wcp-9r3j-383q"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":true,"disclosureDate":"2026-07-22T17:59:07.000Z","fixReleasedAt":"2026-07-08T08:13:32.352Z","daysToFix":-14,"fixCheckedAt":"2026-10-29T21:32:53.335Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity"],"aiComponentTargeted":"plugin","llmSpecific":false,"classifierConfidence":0.6,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"npm","name":"n8n","fixedVersion":"2.30.1","matchedVersion":"2.30.1","fixReleasedAt":"2026-07-08T08:21:33.484Z","daysToFix":-14,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:32:53.188Z"},{"ecosystem":"npm","name":"n8n","fixedVersion":"1.123.64","matchedVersion":"1.123.64","fixReleasedAt":"2026-07-08T08:13:32.352Z","daysToFix":-14,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:32:53.188Z"},{"ecosystem":"npm","name":"n8n","fixedVersion":"2.29.8","matchedVersion":"2.29.8","fixReleasedAt":"2026-07-08T08:52:18.611Z","daysToFix":-14,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:32:53.188Z"}]}}