{"data":{"ecosystem":"npm","name":"n8n","url":"https://aisecwatch.com/packages/npm/n8n","latestVersion":"2.42.6","firstReleaseAt":"2019-04-24T23:48:19.954Z","repository":"https://github.com/n8n-io/n8n","llm":{"exposure":"direct","depth":0,"integratedAt":"2026-04-29T14:41:55.755Z","integratedVersion":"2.19.1","sdks":["langchain","mcp","pinecone","qdrant","vercel-ai"],"path":[]},"authority":{"profile":["execution","filesystem","mcp_tools","shell"],"fromDependencies":["npm:@modelcontextprotocol/sdk","npm:fast-glob","npm:isolated-vm","npm:shelljs"]},"dependencies":[{"ecosystem":"npm","name":"ai","versionSpec":"^7.0.66","scope":"runtime"},{"ecosystem":"npm","name":"@ai-sdk/anthropic","versionSpec":"^4.0.32","scope":"runtime"},{"ecosystem":"npm","name":"@ai-sdk/openai-compatible","versionSpec":"^3.0.14","scope":"runtime"},{"ecosystem":"npm","name":"@langchain/core","versionSpec":"1.2.8","scope":"runtime"},{"ecosystem":"npm","name":"@modelcontextprotocol/sdk","versionSpec":"1.26.0","scope":"runtime"},{"ecosystem":"npm","name":"@n8n/agents","versionSpec":"0.27.5","scope":"runtime"},{"ecosystem":"npm","name":"@n8n/ai-utilities","versionSpec":"0.35.4","scope":"runtime"},{"ecosystem":"npm","name":"@n8n/ai-workflow-builder","versionSpec":"1.42.4","scope":"runtime"},{"ecosystem":"npm","name":"n8n-core","versionSpec":"2.42.4","scope":"runtime"},{"ecosystem":"npm","name":"@n8n/instance-ai","versionSpec":"1.27.5","scope":"runtime"},{"ecosystem":"npm","name":"@n8n/mcp-browser","versionSpec":"0.22.0","scope":"runtime"},{"ecosystem":"npm","name":"@n8n/n8n-nodes-langchain","versionSpec":"2.42.4","scope":"runtime"},{"ecosystem":"npm","name":"n8n-nodes-base","versionSpec":"2.42.4","scope":"runtime"},{"ecosystem":"npm","name":"@pinecone-database/pinecone","versionSpec":"^5.0.2","scope":"runtime"},{"ecosystem":"npm","name":"@qdrant/js-client-rest","versionSpec":"^1.19.0","scope":"runtime"},{"ecosystem":"npm","name":"@n8n/ai-node-sdk","versionSpec":"0.32.4","scope":"runtime"},{"ecosystem":"npm","name":"@n8n/db","versionSpec":"1.42.4","scope":"runtime"},{"ecosystem":"npm","name":"@n8n/node-engine-compatibility","versionSpec":"0.10.4","scope":"runtime"},{"ecosystem":"npm","name":"@n8n/task-runner","versionSpec":"2.42.4","scope":"runtime"},{"ecosystem":"npm","name":"@1password/connect","versionSpec":"1.4.2","scope":"runtime"},{"ecosystem":"npm","name":"@apidevtools/json-schema-ref-parser","versionSpec":"12.0.2","scope":"runtime"},{"ecosystem":"npm","name":"@asteasolutions/zod-to-openapi","versionSpec":"7.3.4","scope":"runtime"},{"ecosystem":"npm","name":"@aws-sdk/client-secrets-manager","versionSpec":"3.808.0","scope":"runtime"},{"ecosystem":"npm","name":"@azure/identity","versionSpec":"4.13.0","scope":"runtime"},{"ecosystem":"npm","name":"@azure/keyvault-secrets","versionSpec":"4.8.0","scope":"runtime"},{"ecosystem":"npm","name":"bcryptjs","versionSpec":"2.4.3","scope":"runtime"},{"ecosystem":"npm","name":"bull","versionSpec":"4.16.4","scope":"runtime"},{"ecosystem":"npm","name":"cache-manager","versionSpec":"5.2.3","scope":"runtime"},{"ecosystem":"npm","name":"change-case","versionSpec":"^5.4.4","scope":"runtime"},{"ecosystem":"npm","name":"chat","versionSpec":"4.37.0","scope":"runtime"},{"ecosystem":"npm","name":"@chat-adapter/discord","versionSpec":"4.37.0","scope":"runtime"},{"ecosystem":"npm","name":"@chat-adapter/linear","versionSpec":"4.37.0","scope":"runtime"},{"ecosystem":"npm","name":"@chat-adapter/slack","versionSpec":"4.37.0","scope":"runtime"},{"ecosystem":"npm","name":"@chat-adapter/state-memory","versionSpec":"4.37.0","scope":"runtime"},{"ecosystem":"npm","name":"@chat-adapter/teams","versionSpec":"4.37.0","scope":"runtime"},{"ecosystem":"npm","name":"@chat-adapter/telegram","versionSpec":"4.37.0","scope":"runtime"},{"ecosystem":"npm","name":"class-transformer","versionSpec":"0.5.1","scope":"runtime"},{"ecosystem":"npm","name":"class-validator","versionSpec":"0.14.0","scope":"runtime"},{"ecosystem":"npm","name":"compression","versionSpec":"1.8.1","scope":"runtime"},{"ecosystem":"npm","name":"convict","versionSpec":"6.2.5","scope":"runtime"},{"ecosystem":"npm","name":"cookie-parser","versionSpec":"1.4.7","scope":"runtime"},{"ecosystem":"npm","name":"cron","versionSpec":"4.4.0","scope":"runtime"},{"ecosystem":"npm","name":"csrf","versionSpec":"3.1.0","scope":"runtime"},{"ecosystem":"npm","name":"csv-parse","versionSpec":"7.0.2","scope":"runtime"},{"ecosystem":"npm","name":"dotenv","versionSpec":"17.2.3","scope":"runtime"},{"ecosystem":"npm","name":"express","versionSpec":"5.1.0","scope":"runtime"},{"ecosystem":"npm","name":"express-handlebars","versionSpec":"8.0.1","scope":"runtime"},{"ecosystem":"npm","name":"express-openapi-validator","versionSpec":"5.5.3","scope":"runtime"},{"ecosystem":"npm","name":"express-prom-bundle","versionSpec":"8.0.0","scope":"runtime"},{"ecosystem":"npm","name":"express-rate-limit","versionSpec":"7.5.0","scope":"runtime"},{"ecosystem":"npm","name":"fast-glob","versionSpec":"3.3.3","scope":"runtime"},{"ecosystem":"npm","name":"fast-json-patch","versionSpec":"^3.1.1","scope":"runtime"},{"ecosystem":"npm","name":"fflate","versionSpec":"0.8.3","scope":"runtime"},{"ecosystem":"npm","name":"file-type","versionSpec":"21.3.3","scope":"runtime"},{"ecosystem":"npm","name":"flatted","versionSpec":"3.4.2","scope":"runtime"},{"ecosystem":"npm","name":"formidable","versionSpec":"3.5.4","scope":"runtime"},{"ecosystem":"npm","name":"@google-cloud/secret-manager","versionSpec":"5.6.0","scope":"runtime"},{"ecosystem":"npm","name":"@grpc/grpc-js","versionSpec":"^1.14.3","scope":"runtime"},{"ecosystem":"npm","name":"handlebars","versionSpec":"4.7.9","scope":"runtime"},{"ecosystem":"npm","name":"helmet","versionSpec":"8.1.0","scope":"runtime"},{"ecosystem":"npm","name":"http-proxy-middleware","versionSpec":"^3.0.7","scope":"runtime"},{"ecosystem":"npm","name":"ioredis","versionSpec":"5.3.2","scope":"runtime"},{"ecosystem":"npm","name":"isbot","versionSpec":"3.6.13","scope":"runtime"},{"ecosystem":"npm","name":"isolated-vm","versionSpec":"^7.0.1","scope":"runtime"},{"ecosystem":"npm","name":"@joplin/turndown-plugin-gfm","versionSpec":"1.0.64","scope":"runtime"},{"ecosystem":"npm","name":"jose","versionSpec":"^6.2.9","scope":"runtime"},{"ecosystem":"npm","name":"json-diff","versionSpec":"1.0.6","scope":"runtime"},{"ecosystem":"npm","name":"json-schema","versionSpec":"0.4.0","scope":"runtime"},{"ecosystem":"npm","name":"jsonschema","versionSpec":"1.4.1","scope":"runtime"},{"ecosystem":"npm","name":"jsonwebtoken","versionSpec":"9.0.3","scope":"runtime"},{"ecosystem":"npm","name":"langsmith","versionSpec":"0.6.0","scope":"runtime"},{"ecosystem":"npm","name":"ldapts","versionSpec":"8.1.7","scope":"runtime"},{"ecosystem":"npm","name":"linkedom","versionSpec":"^0.18.13","scope":"runtime"},{"ecosystem":"npm","name":"lodash","versionSpec":"4.18.1","scope":"runtime"},{"ecosystem":"npm","name":"lru-cache","versionSpec":"11.5.1","scope":"runtime"},{"ecosystem":"npm","name":"luxon","versionSpec":"3.7.2","scope":"runtime"},{"ecosystem":"npm","name":"@modelcontextprotocol/node","versionSpec":"2.0.0","scope":"runtime"},{"ecosystem":"npm","name":"@modelcontextprotocol/server","versionSpec":"2.0.0","scope":"runtime"},{"ecosystem":"npm","name":"moment-timezone","versionSpec":"0.5.48","scope":"runtime"},{"ecosystem":"npm","name":"@mozilla/readability","versionSpec":"^0.6.0","scope":"runtime"},{"ecosystem":"npm","name":"ms","versionSpec":"2.1.3","scope":"runtime"},{"ecosystem":"npm","name":"multer","versionSpec":"^2.3.0","scope":"runtime"},{"ecosystem":"npm","name":"@n8n/api-types","versionSpec":"1.42.4","scope":"runtime"},{"ecosystem":"npm","name":"@n8n/backend-common","versionSpec":"1.42.4","scope":"runtime"},{"ecosystem":"npm","name":"@n8n/backend-network","versionSpec":"1.16.4","scope":"runtime"},{"ecosystem":"npm","name":"@n8n/backend-services","versionSpec":"1.2.1","scope":"runtime"},{"ecosystem":"npm","name":"@n8n/blob-storage","versionSpec":"1.10.4","scope":"runtime"},{"ecosystem":"npm","name":"@n8n/chat-hub","versionSpec":"1.35.4","scope":"runtime"},{"ecosystem":"npm","name":"@n8n/client-oauth2","versionSpec":"1.24.4","scope":"runtime"},{"ecosystem":"npm","name":"@n8n/config","versionSpec":"2.40.1","scope":"runtime"},{"ecosystem":"npm","name":"@n8n/constants","versionSpec":"0.40.0","scope":"runtime"},{"ecosystem":"npm","name":"@n8n/decorators","versionSpec":"1.42.4","scope":"runtime"},{"ecosystem":"npm","name":"@n8n/di","versionSpec":"0.17.0","scope":"runtime"},{"ecosystem":"npm","name":"n8n-editor-ui","versionSpec":"2.42.4","scope":"runtime"},{"ecosystem":"npm","name":"@n8n/engine","versionSpec":"0.22.1","scope":"runtime"},{"ecosystem":"npm","name":"@n8n/errors","versionSpec":"0.14.0","scope":"runtime"},{"ecosystem":"npm","name":"@n8n/expression-runtime","versionSpec":"0.33.0","scope":"runtime"},{"ecosystem":"npm","name":"@n8n_io/ai-assistant-sdk","versionSpec":"1.27.0","scope":"runtime"},{"ecosystem":"npm","name":"@n8n_io/license-sdk","versionSpec":"3.1.0","scope":"runtime"},{"ecosystem":"npm","name":"@n8n/mcp-apps","versionSpec":"0.19.4","scope":"runtime"},{"ecosystem":"npm","name":"@n8n/permissions","versionSpec":"0.79.1","scope":"runtime"},{"ecosystem":"npm","name":"@n8n/scheduler","versionSpec":"1.11.3","scope":"runtime"},{"ecosystem":"npm","name":"@n8n/syslog-client","versionSpec":"1.12.0","scope":"runtime"},{"ecosystem":"npm","name":"@n8n/telemetry","versionSpec":"1.10.4","scope":"runtime"},{"ecosystem":"npm","name":"@n8n/typeorm","versionSpec":"0.11.0","scope":"runtime"},{"ecosystem":"npm","name":"@n8n/utils","versionSpec":"1.49.0","scope":"runtime"},{"ecosystem":"npm","name":"n8n-workflow","versionSpec":"2.42.3","scope":"runtime"},{"ecosystem":"npm","name":"@n8n/workflow-sdk","versionSpec":"0.35.3","scope":"runtime"},{"ecosystem":"npm","name":"nanoid","versionSpec":"3.3.18","scope":"runtime"},{"ecosystem":"npm","name":"nodemailer","versionSpec":"8.0.10","scope":"runtime"},{"ecosystem":"npm","name":"oauth-1.0a","versionSpec":"2.2.6","scope":"runtime"},{"ecosystem":"npm","name":"open","versionSpec":"7.4.2","scope":"runtime"},{"ecosystem":"npm","name":"openid-client","versionSpec":"6.8.4","scope":"runtime"},{"ecosystem":"npm","name":"@opentelemetry/api","versionSpec":"1.9.1","scope":"runtime"},{"ecosystem":"npm","name":"@opentelemetry/core","versionSpec":"2.10.0","scope":"runtime"},{"ecosystem":"npm","name":"@opentelemetry/exporter-trace-otlp-grpc","versionSpec":"^0.221.0","scope":"runtime"},{"ecosystem":"npm","name":"@opentelemetry/exporter-trace-otlp-proto","versionSpec":"^0.221.0","scope":"runtime"},{"ecosystem":"npm","name":"@opentelemetry/resources","versionSpec":"^2.10.0","scope":"runtime"},{"ecosystem":"npm","name":"@opentelemetry/sdk-trace-base","versionSpec":"^2.10.0","scope":"runtime"},{"ecosystem":"npm","name":"@opentelemetry/sdk-trace-node","versionSpec":"^2.10.0","scope":"runtime"},{"ecosystem":"npm","name":"@opentelemetry/semantic-conventions","versionSpec":"^1.43.0","scope":"runtime"},{"ecosystem":"npm","name":"otpauth","versionSpec":"9.1.1","scope":"runtime"},{"ecosystem":"npm","name":"@parcel/watcher","versionSpec":"^2.5.1","scope":"runtime"},{"ecosystem":"npm","name":"p-cancelable","versionSpec":"2.1.1","scope":"runtime"},{"ecosystem":"npm","name":"pdf-parse","versionSpec":"2.4.5","scope":"runtime"},{"ecosystem":"npm","name":"pg","versionSpec":"8.21.0","scope":"runtime"},{"ecosystem":"npm","name":"picocolors","versionSpec":"1.0.1","scope":"runtime"},{"ecosystem":"npm","name":"pkce-challenge","versionSpec":"5.0.0","scope":"runtime"},{"ecosystem":"npm","name":"p-limit","versionSpec":"^3.1.0","scope":"runtime"},{"ecosystem":"npm","name":"posthog-node","versionSpec":"5.49.1","scope":"runtime"},{"ecosystem":"npm","name":"prom-client","versionSpec":"15.1.3","scope":"runtime"},{"ecosystem":"npm","name":"psl","versionSpec":"1.15.0","scope":"runtime"},{"ecosystem":"npm","name":"raw-body","versionSpec":"3.0.0","scope":"runtime"},{"ecosystem":"npm","name":"reflect-metadata","versionSpec":"0.2.2","scope":"runtime"},{"ecosystem":"npm","name":"replacestream","versionSpec":"4.0.3","scope":"runtime"},{"ecosystem":"npm","name":"@rudderstack/rudder-sdk-node","versionSpec":"3.0.5","scope":"runtime"},{"ecosystem":"npm","name":"samlify","versionSpec":"2.13.0","scope":"runtime"},{"ecosystem":"npm","name":"semver","versionSpec":"7.7.3","scope":"runtime"},{"ecosystem":"npm","name":"@sentry/node","versionSpec":"10.70.0","scope":"runtime"},{"ecosystem":"npm","name":"shelljs","versionSpec":"0.8.5","scope":"runtime"},{"ecosystem":"npm","name":"simple-git","versionSpec":"3.36.0","scope":"runtime"},{"ecosystem":"npm","name":"source-map-support","versionSpec":"0.5.21","scope":"runtime"},{"ecosystem":"npm","name":"sqlite3","versionSpec":"5.1.7","scope":"runtime"},{"ecosystem":"npm","name":"sshpk","versionSpec":"1.18.0","scope":"runtime"},{"ecosystem":"npm","name":"sucrase","versionSpec":"3.35.0","scope":"runtime"},{"ecosystem":"npm","name":"@supabase/supabase-js","versionSpec":"2.112.3","scope":"runtime"},{"ecosystem":"npm","name":"swagger-ui-express","versionSpec":"5.0.1","scope":"runtime"},{"ecosystem":"npm","name":"tar","versionSpec":"7.5.21","scope":"runtime"},{"ecosystem":"npm","name":"turndown","versionSpec":"^7.2.4","scope":"runtime"},{"ecosystem":"npm","name":"uuid","versionSpec":"11.1.1","scope":"runtime"},{"ecosystem":"npm","name":"validator","versionSpec":"13.15.26","scope":"runtime"},{"ecosystem":"npm","name":"ws","versionSpec":"8.20.1","scope":"runtime"},{"ecosystem":"npm","name":"xml2js","versionSpec":"0.6.2","scope":"runtime"},{"ecosystem":"npm","name":"xmllint-wasm","versionSpec":"3.0.1","scope":"runtime"},{"ecosystem":"npm","name":"yaml","versionSpec":"2.8.3","scope":"runtime"},{"ecosystem":"npm","name":"yargs-parser","versionSpec":"21.1.1","scope":"runtime"},{"ecosystem":"npm","name":"zod","versionSpec":"3.25.76","scope":"runtime"},{"ecosystem":"npm","name":"zod-to-json-schema","versionSpec":"3.23.3","scope":"runtime"}],"advisories":[{"id":"11b6fbfd-da0f-4e7b-aad9-42691d1e89ef","url":"https://aisecwatch.com/issues/11b6fbfd-da0f-4e7b-aad9-42691d1e89ef","cveId":"CVE-2026-86074","title":"GHSA-q5wm-mgqx-fv2f: n8n: Instance AI Credential Setup Accepts Unvalidated Probe URL from Fetched Content","headline":null,"severity":"medium","publishedAt":"2026-09-10T21:18:48.000Z","affected":["n8n@< 2.37.7 (fixed: 2.37.7)","n8n@>= 2.38.0, < 2.38.2 (fixed: 2.38.2)"],"epssScore":0.00376},{"id":"c58c5fa5-35ed-4adf-8f04-6877792ead00","url":"https://aisecwatch.com/issues/c58c5fa5-35ed-4adf-8f04-6877792ead00","cveId":"CVE-2026-86084","title":"GHSA-pf83-w3f9-8m37: n8n: Disabled OIDC SSO Endpoints Remain Active and Issue Valid Sessions","headline":null,"severity":"medium","publishedAt":"2026-09-10T21:07:24.000Z","affected":["n8n@>= 2.0.0, < 2.37.7 (fixed: 2.37.7)","n8n@>= 2.38.0, < 2.38.2 (fixed: 2.38.2)","n8n@< 1.123.76 (fixed: 1.123.76)"],"epssScore":0.00461},{"id":"8a70f574-894c-4a5d-beae-31c43ed89b6d","url":"https://aisecwatch.com/issues/8a70f574-894c-4a5d-beae-31c43ed89b6d","cveId":"CVE-2026-86080","title":"GHSA-5m98-cgcr-xx3q: n8n: GitHub Trigger 422 Reuse Path Skips Webhook Secret Storage, Causing Signature Verification to Fail-Open","headline":null,"severity":"medium","publishedAt":"2026-09-10T21:06:37.000Z","affected":["n8n@>= 2.0.0, < 2.37.7 (fixed: 2.37.7)","n8n@>= 2.38.0, < 2.38.2 (fixed: 2.38.2)","n8n@< 1.123.76 (fixed: 1.123.76)"],"epssScore":0.00259},{"id":"679a4d83-12c4-4b26-b4ee-b692b8565fe6","url":"https://aisecwatch.com/issues/679a4d83-12c4-4b26-b4ee-b692b8565fe6","cveId":"CVE-2026-86078","title":"GHSA-679f-58pq-4v2c: n8n: Prototype Pollution via Workflow Structure Summary Can Lead to Denial of Service","headline":null,"severity":"medium","publishedAt":"2026-09-10T21:05:24.000Z","affected":["n8n@< 2.37.7 (fixed: 2.37.7)","n8n@>= 2.38.0, < 2.38.2 (fixed: 2.38.2)"],"epssScore":0.00586},{"id":"1fe2892d-c271-4fd2-9047-9fe91e9a963c","url":"https://aisecwatch.com/issues/1fe2892d-c271-4fd2-9047-9fe91e9a963c","cveId":"CVE-2026-86994","title":"GHSA-65xw-2v52-jhxc: n8n: Cross-User Active Workflow ID and Lifecycle Event Disclosure via Missing userId Filter","headline":null,"severity":"medium","publishedAt":"2026-09-10T21:01:27.000Z","affected":["n8n@>= 2.0.0, < 2.37.7 (fixed: 2.37.7)","n8n@>= 2.38.0, < 2.38.2 (fixed: 2.38.2)","n8n@< 1.123.76 (fixed: 1.123.76)"],"epssScore":0.00342},{"id":"8b1b566d-f568-419a-a8bf-ea56c0b8a60d","url":"https://aisecwatch.com/issues/8b1b566d-f568-419a-a8bf-ea56c0b8a60d","cveId":"CVE-2026-86083","title":"GHSA-6xcw-7xm6-48c6: n8n: Expression Sandbox Escape via Shared Builtin Tampering and Code-Printer Injection Leads to Code Execution","headline":null,"severity":"high","publishedAt":"2026-09-10T20:37:21.000Z","affected":["n8n@>= 2.0.0, < 2.37.7 (fixed: 2.37.7)","n8n@>= 2.38.0, < 2.38.2 (fixed: 2.38.2)","n8n@< 1.123.76 (fixed: 1.123.76)"],"epssScore":0.00664},{"id":"c335428c-056c-4a93-a729-bd6ba3b57167","url":"https://aisecwatch.com/issues/c335428c-056c-4a93-a729-bd6ba3b57167","cveId":"CVE-2026-86077","title":"GHSA-35jj-42hp-8gmq: n8n: Anonymous Approval-Gate Bypass via Reused resumeToken over the Chat WebSocket","headline":null,"severity":"medium","publishedAt":"2026-09-10T20:37:00.000Z","affected":["n8n@< 2.37.7 (fixed: 2.37.7)","n8n@>= 2.38.0, < 2.38.2 (fixed: 2.38.2)"],"epssScore":0.00432},{"id":"1c38cd06-adc9-4e66-b6d2-a47270e6b50c","url":"https://aisecwatch.com/issues/1c38cd06-adc9-4e66-b6d2-a47270e6b50c","cveId":"CVE-2026-86075","title":"GHSA-hh89-3r9w-qj3j: n8n: Unauthenticated Persistent Storage Exhaustion via OAuth Dynamic Client Registration Endpoint","headline":null,"severity":"high","publishedAt":"2026-09-10T15:11:31.000Z","affected":["n8n@< 2.37.7 (fixed: 2.37.7)","n8n@>= 2.38.0, < 2.38.2 (fixed: 2.38.2)"],"epssScore":0.00609},{"id":"7bfec98a-5720-4ed1-aca1-baf6b2b227d0","url":"https://aisecwatch.com/issues/7bfec98a-5720-4ed1-aca1-baf6b2b227d0","cveId":"CVE-2026-86082","title":"CVE-2026-86082: n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, the OpenAI Chat Model node…","headline":"n8n OpenAI Chat Model node leaks credentials via model-search dropdown","severity":"high","publishedAt":"2026-09-08T22:19:17.240Z","affected":["n8n@< 1.123.76 (fixed: 1.123.76)","n8n@>= 2.38.0, < 2.38.2 (fixed: 2.38.2)","n8n@>= 2.0.0, < 2.37.7 (fixed: 2.37.7)"],"epssScore":0.00415},{"id":"271a46e0-9393-48d1-8beb-39ebfcb91fa8","url":"https://aisecwatch.com/issues/271a46e0-9393-48d1-8beb-39ebfcb91fa8","cveId":"CVE-2026-86996","title":"GHSA-7hgx-277f-7vmg: n8n: Agent Workflow Tool Bypasses Sub-Workflow Caller Policy","headline":null,"severity":"medium","publishedAt":"2026-09-08T21:33:47.000Z","affected":["n8n@< 2.37.7 (fixed: 2.37.7)","n8n@>= 2.38.0, < 2.38.2 (fixed: 2.38.2)"],"epssScore":0.00294},{"id":"a9f184fa-1e5b-4329-91f4-f452ae21075d","url":"https://aisecwatch.com/issues/a9f184fa-1e5b-4329-91f4-f452ae21075d","cveId":"CVE-2026-65589","title":"GHSA-89gh-3pgc-v5h2: n8n: Custom Header Credential Values Leaked in Plaintext into LLM Node Execution Data","headline":null,"severity":"medium","publishedAt":"2026-07-22T22:54:01.000Z","affected":["n8n@>= 2.0.0-rc.0, < 2.29.8 (fixed: 2.29.8)","n8n@>= 2.30.0, < 2.30.1 (fixed: 2.30.1)","n8n@< 1.123.64 (fixed: 1.123.64)"],"epssScore":0.00484},{"id":"f84d51cd-d616-48f0-861f-b0e28ca67274","url":"https://aisecwatch.com/issues/f84d51cd-d616-48f0-861f-b0e28ca67274","cveId":"CVE-2026-65014","title":"GHSA-33q9-f52j-gc75: n8n: Unauthenticated Endpoint Allows Cancellation of Any User's Active Test Webhook","headline":null,"severity":"medium","publishedAt":"2026-07-22T22:36:10.000Z","affected":["n8n@< 2.27.4 (fixed: 2.27.4)"],"epssScore":0.0059},{"id":"30afdf91-db59-4e10-8fcf-ad1404b8d858","url":"https://aisecwatch.com/issues/30afdf91-db59-4e10-8fcf-ad1404b8d858","cveId":"CVE-2026-65596","title":"GHSA-gq66-9cw5-j5jm: n8n: GraphQL Node Bypasses \"Allowed HTTP Request Domains\" Restriction","headline":null,"severity":"medium","publishedAt":"2026-07-22T22:32:23.000Z","affected":["n8n@>= 2.0.0, < 2.29.8 (fixed: 2.29.8)","n8n@>= 2.30.0, < 2.30.1 (fixed: 2.30.1)","n8n@< 1.123.64 (fixed: 1.123.64)"],"epssScore":0.00367},{"id":"29cd3aa1-a3ab-4dfb-a0c0-f02aab96a2ce","url":"https://aisecwatch.com/issues/29cd3aa1-a3ab-4dfb-a0c0-f02aab96a2ce","cveId":"CVE-2026-65594","title":"GHSA-q5xf-xhwf-cwqf: n8n: Member-Level Users Can Execute Other Users' MCP Server Trigger Workflows via Missing OAuth Authorization Check","headline":null,"severity":"medium","publishedAt":"2026-07-22T22:31:01.000Z","affected":["n8n@< 2.29.8 (fixed: 2.29.8)","n8n@>= 2.30.0, < 2.30.1 (fixed: 2.30.1)"],"epssScore":0.0044},{"id":"0eb0530d-27d7-493e-9d72-dfe189bccac6","url":"https://aisecwatch.com/issues/0eb0530d-27d7-493e-9d72-dfe189bccac6","cveId":"CVE-2026-65590","title":"GHSA-fpg6-x68q-5793: n8n: computer-use Shell Sandbox Not Enforced on Linux and Windows","headline":null,"severity":"medium","publishedAt":"2026-07-22T22:28:24.000Z","affected":["n8n@< 2.29.8 (fixed: 2.29.8)","n8n@>= 2.30.0, < 2.30.1 (fixed: 2.30.1)"],"epssScore":0.00584},{"id":"9cd60674-ddbf-43db-b4ca-9740dfe1c9cb","url":"https://aisecwatch.com/issues/9cd60674-ddbf-43db-b4ca-9740dfe1c9cb","cveId":"CVE-2026-59253","title":"GHSA-2xgm-wc4g-5jvg: n8n: Improper Authorization Allows Authenticated Users to Assign Workflows to Folders in Other Projects","headline":null,"severity":"medium","publishedAt":"2026-07-22T22:24:43.000Z","affected":["n8n@< 2.28.0 (fixed: 2.28.0)"],"epssScore":0.0028},{"id":"c45ab9e4-3849-4f85-b2c5-7a633e718524","url":"https://aisecwatch.com/issues/c45ab9e4-3849-4f85-b2c5-7a633e718524","cveId":"CVE-2026-59254","title":"GHSA-2434-3x6q-8r99: n8n: External Secrets Accessible via Workflow Expressions Outside Credentials","headline":null,"severity":"medium","publishedAt":"2026-07-22T22:23:29.000Z","affected":["n8n@< 2.27.4 (fixed: 2.27.4)","n8n@>= 2.28.0, < 2.28.1 (fixed: 2.28.1)"],"epssScore":0.00364},{"id":"75cf8980-9546-4f81-a62f-0734592fbbd4","url":"https://aisecwatch.com/issues/75cf8980-9546-4f81-a62f-0734592fbbd4","cveId":null,"title":"GHSA-pf2q-pxhf-hgmw: n8n: Path-Confinement Bypass in computer-use search_files Allows Reading Files Outside the Base Directory","headline":null,"severity":"medium","publishedAt":"2026-07-22T22:13:36.000Z","affected":["n8n@< 2.31.5 (fixed: 2.31.5)","n8n@>= 2.32.0, < 2.32.1 (fixed: 2.32.1)"],"epssScore":null},{"id":"f340354a-b790-4521-875f-be59d481a1c8","url":"https://aisecwatch.com/issues/f340354a-b790-4521-875f-be59d481a1c8","cveId":null,"title":"GHSA-hx4h-vr3m-45vh: n8n: Prototype Pollution via VM Expression Engine Sandbox Escape Leads to Denial of Service","headline":null,"severity":"medium","publishedAt":"2026-07-22T22:13:04.000Z","affected":["n8n@>= 2.0.0-rc.0, < 2.31.5 (fixed: 2.31.5)","n8n@>= 2.32.0, < 2.32.1 (fixed: 2.32.1)","n8n@< 1.123.67 (fixed: 1.123.67)"],"epssScore":null},{"id":"712b6e71-11cf-4028-b955-57f2b3c7f4d2","url":"https://aisecwatch.com/issues/712b6e71-11cf-4028-b955-57f2b3c7f4d2","cveId":null,"title":"GHSA-xwx6-jjhv-84p8: n8n: Prototype Pollution via Dot-Notation Field Names Leads To Instance-Wide Denial of Service","headline":null,"severity":"high","publishedAt":"2026-07-22T22:12:33.000Z","affected":["n8n@>= 2.0.0-rc.0, < 2.31.5 (fixed: 2.31.5)","n8n@>= 2.32.0, < 2.32.1 (fixed: 2.32.1)","n8n@< 1.123.67 (fixed: 1.123.67)"],"epssScore":null},{"id":"9aeac69d-e085-43c2-992e-275590be6832","url":"https://aisecwatch.com/issues/9aeac69d-e085-43c2-992e-275590be6832","cveId":null,"title":"GHSA-xmc9-4f2h-jf9c: n8n: Edit Image Node Format Injection Allows Arbitrary File Write","headline":null,"severity":"high","publishedAt":"2026-07-22T22:11:49.000Z","affected":["n8n@>= 2.0.0-rc.0, < 2.31.5 (fixed: 2.31.5)","n8n@>= 2.32.0, < 2.32.1 (fixed: 2.32.1)","n8n@< 1.123.67 (fixed: 1.123.67)"],"epssScore":null},{"id":"064cd458-6461-4ac8-885d-416dd69bad13","url":"https://aisecwatch.com/issues/064cd458-6461-4ac8-885d-416dd69bad13","cveId":null,"title":"GHSA-cj9h-qx8g-pq2g: n8n: Shared-Workflow Editor Can Exfiltrate Credentials via Inline Sub-Workflow JSON","headline":null,"severity":"high","publishedAt":"2026-07-22T22:11:22.000Z","affected":["n8n@>= 2.0.0-rc.0, < 2.31.5 (fixed: 2.31.5)","n8n@>= 2.32.0, < 2.32.1 (fixed: 2.32.1)","n8n@< 1.123.67 (fixed: 1.123.67)"],"epssScore":null},{"id":"bdd7670e-1015-4e34-adaf-d3734f157839","url":"https://aisecwatch.com/issues/bdd7670e-1015-4e34-adaf-d3734f157839","cveId":null,"title":"GHSA-gv7g-jm28-cr3m: n8n: Expression sandbox escape via arrow-function bodies enabling command execution","headline":null,"severity":"high","publishedAt":"2026-07-22T22:10:15.000Z","affected":["n8n@< 2.31.5 (fixed: 2.31.5)","n8n@>= 2.32.0, < 2.32.1 (fixed: 2.32.1)"],"epssScore":null},{"id":"ac0cccf5-6e04-40d7-9a9b-c2e88c69ad5e","url":"https://aisecwatch.com/issues/ac0cccf5-6e04-40d7-9a9b-c2e88c69ad5e","cveId":null,"title":"GHSA-vhf8-cg2h-cg3p: n8n: SSRF Protection Bypass via MCP Client Node","headline":null,"severity":"medium","publishedAt":"2026-07-22T22:07:04.000Z","affected":["n8n@< 2.31.5 (fixed: 2.31.5)","n8n@>= 2.32.0, < 2.32.1 (fixed: 2.32.1)"],"epssScore":null},{"id":"528f771f-68a2-44fe-b004-70e6dec5ab0c","url":"https://aisecwatch.com/issues/528f771f-68a2-44fe-b004-70e6dec5ab0c","cveId":"CVE-2026-65592","title":"GHSA-9wcp-9r3j-383q: n8n: Stored DOM XSS via Resource Locator `cachedResultUrl`","headline":null,"severity":"high","publishedAt":"2026-07-22T17:59:07.000Z","affected":["n8n@>= 2.0.0-rc.0, < 2.29.8 (fixed: 2.29.8)","n8n@>= 2.30.0, < 2.30.1 (fixed: 2.30.1)","n8n@< 1.123.64 (fixed: 1.123.64)"],"epssScore":0.00243},{"id":"15aab7ad-2a37-4dfa-ab33-2e429dd9ee02","url":"https://aisecwatch.com/issues/15aab7ad-2a37-4dfa-ab33-2e429dd9ee02","cveId":"CVE-2026-65015","title":"GHSA-x5vx-c2c8-m3w9: n8n: AI Agents Project Viewer Privilege Escalation via run_node_tool","headline":null,"severity":"high","publishedAt":"2026-07-22T17:55:55.000Z","affected":["n8n@< 2.29.8 (fixed: 2.29.8)","n8n@>= 2.30.0, < 2.30.1 (fixed: 2.30.1)"],"epssScore":0.00608},{"id":"e8c95a47-fb92-4a45-8b90-2b8730257e41","url":"https://aisecwatch.com/issues/e8c95a47-fb92-4a45-8b90-2b8730257e41","cveId":null,"title":"GHSA-h5xr-fqvj-253p: Duplicate Advisory: Stored DOM XSS via Resource Locator `cachedResultUrl`","headline":null,"severity":"high","publishedAt":"2026-07-22T12:32:17.000Z","affected":["n8n@< 1.123.64"],"epssScore":null},{"id":"86cb3cd6-f6a1-4bf2-a158-ed01d32682c7","url":"https://aisecwatch.com/issues/86cb3cd6-f6a1-4bf2-a158-ed01d32682c7","cveId":null,"title":"GHSA-w46p-w7w2-fr9g: Duplicate Advisory:  AI Agents Project Viewer Privilege Escalation via run_node_tool","headline":null,"severity":"high","publishedAt":"2026-07-22T12:32:17.000Z","affected":["n8n@< 2.29.8"],"epssScore":null},{"id":"c0b22e13-0beb-4c81-b1a7-964abae85596","url":"https://aisecwatch.com/issues/c0b22e13-0beb-4c81-b1a7-964abae85596","cveId":"CVE-2026-59207","title":"CVE-2026-59207: n8n is an open source workflow automation platform. Prior to 2.27.4 and 2.28.1, the AI Agents feature did not enforce…","headline":"n8n AI Agents MCP tool ignores credential HTTP domain restriction","severity":"high","publishedAt":"2026-07-09T16:16:46.470Z","affected":["n8n@>= 2.28.0, < 2.28.1 (fixed: 2.28.1)","n8n@< 2.27.4 (fixed: 2.27.4)"],"epssScore":0.00448},{"id":"5a27a0c3-a89b-402b-8150-50ca6987d1c5","url":"https://aisecwatch.com/issues/5a27a0c3-a89b-402b-8150-50ca6987d1c5","cveId":null,"title":"GHSA-664h-gpgq-h6xx: n8n: Wrong OAuth Scope on Evaluation Test Runs Endpoints","headline":null,"severity":"medium","publishedAt":"2026-06-17T13:55:59.000Z","affected":["n8n@>= 2.0.0-rc.0, < 2.25.7 (fixed: 2.25.7)","n8n@>= 2.26.0, < 2.26.2 (fixed: 2.26.2)","n8n@< 1.123.55 (fixed: 1.123.55)"],"epssScore":null},{"id":"76fa323e-5dfb-49b6-ba0e-1ff4359b4f03","url":"https://aisecwatch.com/issues/76fa323e-5dfb-49b6-ba0e-1ff4359b4f03","cveId":"CVE-2026-54309","title":"GHSA-qrx8-25qr-5r7v: n8n: MCP Browser HTTP Transport Exposes Unauthenticated Browser-Control Sessions","headline":null,"severity":"high","publishedAt":"2026-06-16T23:32:31.000Z","affected":["n8n@< 2.25.7 (fixed: 2.25.7)","n8n@>= 2.26.0, < 2.26.2 (fixed: 2.26.2)"],"epssScore":0.00546},{"id":"74ef4aba-5c55-44e5-81f1-03994e2230a7","url":"https://aisecwatch.com/issues/74ef4aba-5c55-44e5-81f1-03994e2230a7","cveId":null,"title":"GHSA-h3jj-5f3v-3685: n8n: Public API Execution Retry Authorization Bypass","headline":null,"severity":"medium","publishedAt":"2026-06-16T22:40:06.000Z","affected":["n8n@< 2.25.7 (fixed: 2.25.7)","n8n@>= 2.26.0, < 2.26.2 (fixed: 2.26.2)"],"epssScore":null},{"id":"d639eb5c-25e8-44b2-a368-a81267d685b9","url":"https://aisecwatch.com/issues/d639eb5c-25e8-44b2-a368-a81267d685b9","cveId":null,"title":"GHSA-jwm3-qcfw-c5pp: n8n: Python Code Node AST Validator Bypass","headline":null,"severity":"medium","publishedAt":"2026-06-16T22:39:46.000Z","affected":["n8n@< 2.25.7 (fixed: 2.25.7)","n8n@>= 2.26.0, < 2.26.2 (fixed: 2.26.2)"],"epssScore":null},{"id":"08161e0d-2593-4d41-ba46-6f50217454ae","url":"https://aisecwatch.com/issues/08161e0d-2593-4d41-ba46-6f50217454ae","cveId":"CVE-2026-54302","title":"GHSA-42h7-m79w-wvg5: n8n: Stored XSS in Chat Trigger Node","headline":null,"severity":"high","publishedAt":"2026-06-16T22:39:32.000Z","affected":["n8n@>= 2.0.0-rc.0, < 2.25.7 (fixed: 2.25.7)","n8n@>= 2.26.0, < 2.26.2 (fixed: 2.26.2)","n8n@< 1.123.55 (fixed: 1.123.55)"],"epssScore":0.00231},{"id":"31b8f8cc-f1bd-4587-840b-85a86be4a569","url":"https://aisecwatch.com/issues/31b8f8cc-f1bd-4587-840b-85a86be4a569","cveId":"CVE-2026-49444","title":"GHSA-9pq8-m8gp-4p53: n8n: Python sandbox escape","headline":null,"severity":"high","publishedAt":"2026-06-16T17:37:21.000Z","affected":["n8n@>= 2.0.0-rc.0, < 2.21.8 (fixed: 2.21.8)","n8n@>= 2.22.0, < 2.22.4 (fixed: 2.22.4)","n8n@< 1.123.48 (fixed: 1.123.48)"],"epssScore":0.00385},{"id":"9e78e7ed-15ac-4b5a-9e4d-77d77f2491da","url":"https://aisecwatch.com/issues/9e78e7ed-15ac-4b5a-9e4d-77d77f2491da","cveId":null,"title":"GHSA-3875-8gcx-7v46: n8n: Credential exfiltration via Allowed HTTP Request Domains Bypass","headline":null,"severity":"medium","publishedAt":"2026-05-19T16:17:43.000Z","affected":["n8n@< 2.20.0 (fixed: 2.20.0)"],"epssScore":null},{"id":"aca5fa45-1560-45c2-ac7c-9f353bcc068e","url":"https://aisecwatch.com/issues/aca5fa45-1560-45c2-ac7c-9f353bcc068e","cveId":null,"title":"GHSA-2vx9-7wpg-88jq: n8n: Legacy ExecuteWorkflow Node Bypassed File Path Restrictions","headline":null,"severity":"medium","publishedAt":"2026-05-19T15:55:43.000Z","affected":["n8n@< 2.19.3 (fixed: 2.19.3)"],"epssScore":null},{"id":"79ac9ef5-a8dd-4673-b503-5bcc33c27c2b","url":"https://aisecwatch.com/issues/79ac9ef5-a8dd-4673-b503-5bcc33c27c2b","cveId":"CVE-2026-45732","title":"GHSA-6h4j-wcr9-2vg7: n8n Has a Cross-user Authorization Bypass in Dynamic Credential OAuth Endpoints","headline":null,"severity":"high","publishedAt":"2026-05-14T16:18:14.000Z","affected":["n8n@>= 2.0.0-rc.0, < 2.20.7 (fixed: 2.20.7)","n8n@>= 2.21.0, < 2.21.1 (fixed: 2.21.1)","n8n@< 1.123.43 (fixed: 1.123.43)"],"epssScore":0.0035},{"id":"961556a7-6eac-43a3-a839-d39ec5457aa4","url":"https://aisecwatch.com/issues/961556a7-6eac-43a3-a839-d39ec5457aa4","cveId":"CVE-2026-44789","title":"GHSA-c8xv-5998-g76h: n8n: HTTP Request Node Pagination Prototype Pollution to RCE","headline":null,"severity":"critical","publishedAt":"2026-05-14T16:17:23.000Z","affected":["n8n@>= 2.0.0-rc.0, < 2.20.7 (fixed: 2.20.7)","n8n@>= 2.21.0, < 2.22.1 (fixed: 2.22.1)","n8n@< 1.123.43 (fixed: 1.123.43)"],"epssScore":0.00529},{"id":"535339f8-3df0-4507-839e-d14435a1cd73","url":"https://aisecwatch.com/issues/535339f8-3df0-4507-839e-d14435a1cd73","cveId":"CVE-2026-42231","title":"GHSA-q5f4-99jv-pgg5: n8n has Prototype Pollution in XML Webhook Body Parser that Leads to RCE","headline":null,"severity":"critical","publishedAt":"2026-04-29T21:25:02.000Z","affected":["n8n@>= 2.17.0, < 2.17.4 (fixed: 2.17.4)","n8n@>= 2.18.0, < 2.18.1 (fixed: 2.18.1)","n8n@< 1.123.32 (fixed: 1.123.32)"],"epssScore":0.00762},{"id":"d850b6eb-974c-4e2c-afb7-ab1417ee082a","url":"https://aisecwatch.com/issues/d850b6eb-974c-4e2c-afb7-ab1417ee082a","cveId":"CVE-2026-42235","title":"GHSA-537j-gqpc-p7fq: n8n Vulnerable to XSS via MCP OAuth client","headline":null,"severity":"high","publishedAt":"2026-04-29T21:23:04.000Z","affected":["n8n@>= 2.17.0, < 2.17.4 (fixed: 2.17.4)","n8n@>= 2.18.0, < 2.18.1 (fixed: 2.18.1)","n8n@< 1.123.32 (fixed: 1.123.32)"],"epssScore":0.00505},{"id":"a52e3144-b1e5-463f-982e-d1ee78b27c3a","url":"https://aisecwatch.com/issues/a52e3144-b1e5-463f-982e-d1ee78b27c3a","cveId":"CVE-2026-42226","title":"GHSA-r4v6-9fqc-w5jr: n8n's Credential Authorization Bypass in dynamic-node-parameters Allows Foreign API Key Replay","headline":null,"severity":"high","publishedAt":"2026-04-29T21:22:26.000Z","affected":["n8n@< 1.123.33 (fixed: 1.123.33)","n8n@>= 2.17.0, < 2.17.5 (fixed: 2.17.5)"],"epssScore":0.00424},{"id":"76b16080-c61d-4250-a4f8-75165862ca5a","url":"https://aisecwatch.com/issues/76b16080-c61d-4250-a4f8-75165862ca5a","cveId":"CVE-2026-42236","title":"GHSA-49m9-pgww-9vq6: n8n Vulnerable to Unauthenticated Denial of Service via MCP Client Registration","headline":null,"severity":"high","publishedAt":"2026-04-29T21:19:07.000Z","affected":["n8n@>= 2.0.0, < 2.17.4 (fixed: 2.17.4)","n8n@>= 2.18.0, < 2.18.1 (fixed: 2.18.1)","n8n@< 1.123.32 (fixed: 1.123.32)"],"epssScore":0.00651},{"id":"af4233d5-c108-4aea-b9d1-5f9dada74fd2","url":"https://aisecwatch.com/issues/af4233d5-c108-4aea-b9d1-5f9dada74fd2","cveId":"CVE-2026-42228","title":"GHSA-f77h-j2v7-g6mw: n8n Vulnerable to Hijacking of Unauthenticated Chat Execution ","headline":null,"severity":"medium","publishedAt":"2026-04-29T21:17:44.000Z","affected":["n8n@>= 2.0.0, < 2.17.4 (fixed: 2.17.4)","n8n@>= 2.18.0, < 2.18.1 (fixed: 2.18.1)","n8n@< 1.123.32 (fixed: 1.123.32)"],"epssScore":0.00453},{"id":"8ba68a33-afe9-49c9-b1ae-9a7ab96267fe","url":"https://aisecwatch.com/issues/8ba68a33-afe9-49c9-b1ae-9a7ab96267fe","cveId":"CVE-2026-42230","title":"GHSA-f6x8-65q6-j9m9: n8n has Open Redirect in MCP OAuth Consent Flow","headline":null,"severity":"medium","publishedAt":"2026-04-29T21:10:17.000Z","affected":["n8n@>= 2.0.0, < 2.17.4 (fixed: 2.17.4)","n8n@>= 2.18.0, < 2.18.1 (fixed: 2.18.1)","n8n@< 1.123.32 (fixed: 1.123.32)"],"epssScore":0.00295},{"id":"92a02067-5904-4039-b9bf-74d25a3c5b48","url":"https://aisecwatch.com/issues/92a02067-5904-4039-b9bf-74d25a3c5b48","cveId":null,"title":"GHSA-3c7f-5hgj-h279: n8n has XSS in Chat Trigger Node through Custom CSS","headline":null,"severity":"medium","publishedAt":"2026-03-27T18:06:49.000Z","affected":["n8n@>= 2.0.0-rc.0, < 2.13.3 (fixed: 2.13.3)","n8n@= 2.14.0 (fixed: 2..14.1)","n8n@< 1.123.27 (fixed: 1.123.27)"],"epssScore":null},{"id":"6797d3b4-2524-4ad9-8c04-6d2c61887644","url":"https://aisecwatch.com/issues/6797d3b4-2524-4ad9-8c04-6d2c61887644","cveId":"CVE-2026-33722","title":"GHSA-fxcw-h3qj-8m8p: n8n Has External Secrets Authorization Bypass in Credential Saving","headline":null,"severity":"high","publishedAt":"2026-03-25T22:05:44.000Z","affected":["n8n@>= 2.0.0-rc.0, < 2.6.4 (fixed: 2.6.4)","n8n@< 1.123.23 (fixed: 1.123.23)"],"epssScore":0.00293},{"id":"890bde78-7142-480f-912f-4fabe278c0e3","url":"https://aisecwatch.com/issues/890bde78-7142-480f-912f-4fabe278c0e3","cveId":"CVE-2026-33720","title":"GHSA-vpgc-2f6g-7w7x: n8n Has Authorization Bypass in OAuth Callback via N8N_SKIP_AUTH_ON_OAUTH_CALLBACK","headline":null,"severity":"medium","publishedAt":"2026-03-25T21:57:55.000Z","affected":["n8n@< 2.8.0 (fixed: 2.8.0)"],"epssScore":0.00209},{"id":"00d54b06-89bf-44d4-a6b1-269c238129b4","url":"https://aisecwatch.com/issues/00d54b06-89bf-44d4-a6b1-269c238129b4","cveId":"CVE-2026-33663","title":"GHSA-m63j-689w-3j35: n8n is Vulnerable to Credential Theft via Name-Based Resolution and Permission Checker Bypass in Community Edition","headline":null,"severity":"high","publishedAt":"2026-03-25T21:08:33.000Z","affected":["n8n@>= 2.0.0-rc.0, < 2.13.3 (fixed: 2.13.3)","n8n@= 2.14.0 (fixed: 2.14.1)","n8n@< 1.123.27 (fixed: 1.123.27)"],"epssScore":0.00451},{"id":"ef69cdfd-662a-4deb-853d-22f331359a1b","url":"https://aisecwatch.com/issues/ef69cdfd-662a-4deb-853d-22f331359a1b","cveId":"CVE-2026-27496","title":"GHSA-xvh5-5qg4-x9qp: n8n has In-Process Memory Disclosure in its Task Runner","headline":null,"severity":"high","publishedAt":"2026-03-25T17:00:25.000Z","affected":["n8n@>= 2.0.0-rc.0, < 2.9.3 (fixed: 2.9.3)","n8n@>= 2.10.0, < 2.10.1 (fixed: 2.10.1)","n8n@< 1.123.22 (fixed: 1.123.22)"],"epssScore":0.00455},{"id":"9bd28e9b-d9b9-4588-a414-8f0974f77f94","url":"https://aisecwatch.com/issues/9bd28e9b-d9b9-4588-a414-8f0974f77f94","cveId":"CVE-2025-68613","title":"CVE-2025-68613: n8n Improper Control of Dynamically-Managed Code Resources Vulnerability","headline":null,"severity":"critical","publishedAt":"2026-03-11T00:00:00.000Z","affected":["n8n@>= 0.211.0, < 1.120.4 (fixed: 1.120.4)","n8n@>= 1.121.0, < 1.121.1 (fixed: 1.121.1)"],"epssScore":0.98994},{"id":"777bfe88-cb8c-42f3-86c9-d224a2f9804f","url":"https://aisecwatch.com/issues/777bfe88-cb8c-42f3-86c9-d224a2f9804f","cveId":null,"title":"GHSA-fvfv-ppw4-7h2w: n8n has a Guardrail Node Bypass","headline":null,"severity":"medium","publishedAt":"2026-02-26T22:46:42.000Z","affected":["n8n@< 2.10.0 (fixed: 2.10.0)"],"epssScore":null},{"id":"aac4601d-819a-4867-bd51-98f6f0913148","url":"https://aisecwatch.com/issues/aac4601d-819a-4867-bd51-98f6f0913148","cveId":null,"title":"GHSA-jh8h-6c9q-7gmw: n8n has an Authentication Bypass in its Chat Trigger Node","headline":null,"severity":"medium","publishedAt":"2026-02-26T22:45:41.000Z","affected":["n8n@>= 2.10.0, < 2.10.1 (fixed: 2.10.1)","n8n@>= 2.0.0, < 2.9.3 (fixed: 2.9.3)","n8n@< 1.123.22 (fixed: 1.123.22)"],"epssScore":null},{"id":"64c73397-dc56-4a83-8660-20cf45fed885","url":"https://aisecwatch.com/issues/64c73397-dc56-4a83-8660-20cf45fed885","cveId":"CVE-2026-27578","title":"GHSA-2p9h-rqjw-gm92: n8n Vulnerable to Stored XSS via Various Nodes","headline":null,"severity":"high","publishedAt":"2026-02-25T22:28:57.000Z","affected":["n8n@>= 2.10.0, < 2.10.1 (fixed: 2.10.1)","n8n@>= 2.0.0, < 2.9.3 (fixed: 2.9.3)","n8n@< 1.123.22 (fixed: 1.123.22)"],"epssScore":0.00317},{"id":"3377ae66-9b97-40b5-a22a-3c69a2b9c3f4","url":"https://aisecwatch.com/issues/3377ae66-9b97-40b5-a22a-3c69a2b9c3f4","cveId":"CVE-2026-27577","title":"GHSA-vpcf-gvg4-6qwr: n8n: Expression Sandbox Escape Leads to RCE","headline":null,"severity":"critical","publishedAt":"2026-02-25T22:05:09.000Z","affected":["n8n@>= 2.10.0, < 2.10.1 (fixed: 2.10.1)","n8n@>= 2.0.0, < 2.9.3 (fixed: 2.9.3)","n8n@< 1.123.22 (fixed: 1.123.22)"],"epssScore":0.01014},{"id":"6116b75c-12e8-49b5-8395-466e4524abda","url":"https://aisecwatch.com/issues/6116b75c-12e8-49b5-8395-466e4524abda","cveId":"CVE-2026-27495","title":"GHSA-jjpj-p2wh-qf23: n8n has a Sandbox Escape in its JavaScript Task Runner","headline":null,"severity":"critical","publishedAt":"2026-02-25T21:23:15.000Z","affected":["n8n@>= 2.10.0, < 2.10.1 (fixed: 2.10.1)","n8n@>= 2.0.0, < 2.9.3 (fixed: 2.9.3)","n8n@< 1.123.22 (fixed: 1.123.22)"],"epssScore":0.00823},{"id":"6f3a27bc-8803-4d0d-b79e-fc33dac73962","url":"https://aisecwatch.com/issues/6f3a27bc-8803-4d0d-b79e-fc33dac73962","cveId":"CVE-2025-58177","title":"CVE-2025-58177: n8n is an open source workflow automation platform. From 1.24.0 to before 1.107.0, there is a stored cross-site…","headline":"n8n stored cross-site scripting in LangChain Chat Trigger initialMessages","severity":"medium","publishedAt":"2025-09-15T21:15:35.783Z","affected":["n8n@>= 1.24.0, < 1.107.0 (fixed: 1.107.0)"],"epssScore":0.00243}],"checkedAt":"2026-10-09T21:52:43.743Z"},"meta":{"advisoryMatching":"by package name; advisory records do not state an ecosystem"}}