- Latest release
- 2.46.6 (Nov 4, 2026): no advisory affects it
- Newest unaffected release
- 2.47.2 (Nov 4, 2026)
- Advisories
- 158 · 24 critical, 60 high, 74 medium
- Weekly downloads
- 159.8K
- Dependents
- 16
- Releases
- 500+ since 1.110.2 (Sep 19, 2025)
- Registry
- npm
- Releases read
- Nov 8, 2026
Version timeline
- CVE-2026-86075Affects 1.109.2-exp.0 to 2.37.6 (2.37.7 is outside it); 2.38.0 to 2.38.1 (2.38.2 is outside it)
- CVE-2026-86076Affects 1.109.2-exp.0 to 1.123.75 (1.123.76 is outside it); 2.0.0 to 2.37.6 (2.37.7 is outside it); 2.38.0 to 2.38.1 (2.38.2 is outside it)
- CVE-2026-86077Affects 1.109.2-exp.0 to 2.37.6 (2.37.7 is outside it); 2.38.0 to 2.38.1 (2.38.2 is outside it)
- CVE-2026-86078Affects 1.109.2-exp.0 to 2.37.6 (2.37.7 is outside it); 2.38.0 to 2.38.1 (2.38.2 is outside it)
- CVE-2026-86079Affects 1.109.2-exp.0 to 1.123.75 (1.123.76 is outside it); 2.0.0 to 2.37.6 (2.37.7 is outside it); 2.38.0 to 2.38.1 (2.38.2 is outside it)
- CVE-2026-86080Affects 1.109.2-exp.0 to 1.123.75 (1.123.76 is outside it); 2.0.0 to 2.37.6 (2.37.7 is outside it); 2.38.0 to 2.38.1 (2.38.2 is outside it)
- CVE-2026-86081Affects 1.109.2-exp.0 to 1.123.75 (1.123.76 is outside it); 2.0.0 to 2.37.6 (2.37.7 is outside it); 2.38.0 to 2.38.1 (2.38.2 is outside it)
- CVE-2026-86082Affects 1.109.2-exp.0 to 1.123.75 (1.123.76 is outside it); 2.0.0 to 2.37.6 (2.37.7 is outside it); 2.38.0 to 2.38.1 (2.38.2 is outside it)
- CVE-2026-86083Affects 1.109.2-exp.0 to 1.123.75 (1.123.76 is outside it); 2.0.0 to 2.37.6 (2.37.7 is outside it); 2.38.0 to 2.38.1 (2.38.2 is outside it)
- CVE-2026-86084Affects 1.109.2-exp.0 to 1.123.75 (1.123.76 is outside it); 2.0.0 to 2.37.6 (2.37.7 is outside it); 2.38.0 to 2.38.1 (2.38.2 is outside it)
- CVE-2026-86085Affects 1.109.2-exp.0 to 2.37.6 (2.37.7 is outside it); 2.38.0 to 2.38.1 (2.38.2 is outside it)
- CVE-2026-86993Affects 1.109.2-exp.0 to 1.123.75 (1.123.76 is outside it); 2.0.0 to 2.37.6 (2.37.7 is outside it); 2.38.0 to 2.38.1 (2.38.2 is outside it)
Show all 158 advisoriesShow fewer advisories
- CVE-2026-86994Affects 1.109.2-exp.0 to 1.123.75 (1.123.76 is outside it); 2.0.0 to 2.37.6 (2.37.7 is outside it); 2.38.0 to 2.38.1 (2.38.2 is outside it)
- CVE-2026-86995Affects 1.109.2-exp.0 to 1.123.75 (1.123.76 is outside it); 2.0.0 to 2.37.6 (2.37.7 is outside it); 2.38.0 to 2.38.1 (2.38.2 is outside it)
- CVE-2026-86996Affects 1.109.2-exp.0 to 2.37.6 (2.37.7 is outside it); 2.38.0 to 2.38.1 (2.38.2 is outside it)
- CVE-2026-86074Affects 1.109.2-exp.0 to 2.37.6 (2.37.7 is outside it); 2.38.0 to 2.38.1 (2.38.2 is outside it)
- CVE-2026-86073Affects 1.109.2-exp.0 to 2.37.6 (2.37.7 is outside it); 2.38.0 (2.38.1 is outside it)
- CVE-2026-71539Affects 1.109.2-exp.0 to 1.123.63 (1.123.64 is outside it); 2.0.0-rc.0 to 2.29.7 (2.29.8 is outside it); 2.30.0 (2.30.1 is outside it)
- CVE-2026-72775Affects 1.109.2-exp.0 to 1.123.66 (1.123.67 is outside it); 2.0.0-rc.0 to 2.31.4 (2.31.5 is outside it); 2.32.0 (2.32.1 is outside it)
- CVE-2026-72774Affects 1.109.2-exp.0 to 1.123.66 (1.123.67 is outside it); 2.0.0-rc.0 to 2.31.4 (2.31.5 is outside it); 2.32.0 (2.32.1 is outside it)
- CVE-2026-72773Affects 1.109.2-exp.0 to 2.31.4 (2.31.5 is outside it); 2.32.0 (2.32.1 is outside it)
- CVE-2026-72772Affects 1.109.2-exp.0 to 2.31.4 (2.31.5 is outside it); 2.32.0 (2.32.1 is outside it)
- CVE-2026-72771Affects 1.109.2-exp.0 to 2.31.4 (2.31.5 is outside it); 2.32.0 (2.32.1 is outside it)
- CVE-2026-72770Affects 1.109.2-exp.0 to 1.123.66 (1.123.67 is outside it); 2.0.0-rc.0 to 2.31.4 (2.31.5 is outside it); 2.32.0 (2.32.1 is outside it)
- CVE-2026-72769Affects 1.109.2-exp.0 to 1.123.66 (1.123.67 is outside it); 2.0.0-rc.0 to 2.31.4 (2.31.5 is outside it); 2.32.0 (2.32.1 is outside it)
- CVE-2026-72768Affects 1.109.2-exp.0 to 2.31.4 (2.31.5 is outside it); 2.32.0 (2.32.1 is outside it)
- CVE-2026-72767Affects 1.109.2-exp.0 to 1.123.66 (1.123.67 is outside it); 2.0.0-rc.0 to 2.31.4 (2.31.5 is outside it); 2.32.0 (2.32.1 is outside it)
- CVE-2026-72766Affects 1.109.2-exp.0 to 1.123.66 (1.123.67 is outside it); 2.0.0-rc.0 to 2.31.4 (2.31.5 is outside it); 2.32.0 (2.32.1 is outside it)
- CVE-2026-72765Affects 1.109.2-exp.0 to 2.31.4 (2.31.5 is outside it); 2.32.0 (2.32.1 is outside it)
- CVE-2026-72764Affects 1.109.2-exp.0 to 1.123.66 (1.123.67 is outside it); 2.0.0-rc.0 to 2.31.4 (2.31.5 is outside it); 2.32.0 (2.32.1 is outside it)
- CVE-2026-72763Affects 1.109.2-exp.0 to 1.123.66 (1.123.67 is outside it); 2.0.0-rc.0 to 2.31.4 (2.31.5 is outside it); 2.32.0 (2.32.1 is outside it)
- CVE-2026-72762Affects 1.109.2-exp.0 to 1.123.66 (1.123.67 is outside it); 2.0.0-rc.0 to 2.31.4 (2.31.5 is outside it); 2.32.0 (2.32.1 is outside it)
- CVE-2026-72750Affects 1.109.2-exp.0 to 1.123.66 (1.123.67 is outside it); 2.0.0-rc.0 to 2.31.4 (2.31.5 is outside it); 2.32.0 (2.32.1 is outside it)
- CVE-2026-72749Affects 1.109.2-exp.0 to 1.123.66 (1.123.67 is outside it); 2.0.0-rc.0 to 2.31.4 (2.31.5 is outside it); 2.32.0 (2.32.1 is outside it)
- CVE-2026-65599Affects 1.109.2-exp.0 to 1.123.63 (1.123.64 is outside it); 2.0.0-rc.0 to 2.29.7 (2.29.8 is outside it); 2.30.0 (2.30.1 is outside it)
- CVE-2026-65598Affects 1.109.2-exp.0 to 1.123.63 (1.123.64 is outside it); 2.0.0-rc.0 to 2.29.7 (2.29.8 is outside it); 2.30.0 (2.30.1 is outside it)
- CVE-2026-65597Affects 1.109.2-exp.0 to 1.123.63 (1.123.64 is outside it); 2.0.0-rc.0 to 2.29.7 (2.29.8 is outside it); 2.30.0 (2.30.1 is outside it)
- CVE-2026-65596Affects 1.109.2-exp.0 to 1.123.63 (1.123.64 is outside it); 2.0.0 to 2.29.7 (2.29.8 is outside it); 2.30.0 (2.30.1 is outside it)
- CVE-2026-65595Affects 1.109.2-exp.0 to 2.29.7 (2.29.8 is outside it); 2.30.0 (2.30.1 is outside it)
- CVE-2026-65594Affects 1.109.2-exp.0 to 2.29.7 (2.29.8 is outside it); 2.30.0 (2.30.1 is outside it)
- CVE-2026-65593Affects 1.109.2-exp.0 to 1.123.63 (1.123.64 is outside it); 2.0.0-rc.0 to 2.29.7 (2.29.8 is outside it); 2.30.0 (2.30.1 is outside it)
- CVE-2026-65592Affects 1.109.2-exp.0 to 1.123.63 (1.123.64 is outside it); 2.0.0-rc.0 to 2.29.7 (2.29.8 is outside it); 2.30.0 (2.30.1 is outside it)
- CVE-2026-65591Affects 1.109.2-exp.0 to 1.123.63 (1.123.64 is outside it); 2.0.0-rc.0 to 2.29.7 (2.29.8 is outside it); 2.30.0 (2.30.1 is outside it)
- CVE-2026-65590Affects 1.109.2-exp.0 to 2.29.7 (2.29.8 is outside it); 2.30.0 (2.30.1 is outside it)
- CVE-2026-65589Affects 1.109.2-exp.0 to 1.123.63 (1.123.64 is outside it); 2.0.0-rc.0 to 2.29.7 (2.29.8 is outside it); 2.30.0 (2.30.1 is outside it)
- CVE-2026-65016Affects 1.109.2-exp.0 to 1.123.63 (1.123.64 is outside it); 2.0.0-rc.0 to 2.29.7 (2.29.8 is outside it); 2.30.0 (2.30.1 is outside it)
- CVE-2026-65015Affects 1.109.2-exp.0 to 2.29.7 (2.29.8 is outside it); 2.30.0 (2.30.1 is outside it)
- CVE-2026-65014Affects 1.109.2-exp.0 to 2.27.3 (2.27.4 is outside it)
- CVE-2026-59259Affects 1.109.2-exp.0 to 1.123.60 (1.123.61 is outside it); 2.0.0-rc.0 to 2.27.3 (2.27.4 is outside it); 2.28.0 (2.28.1 is outside it)
- CVE-2026-59254Affects 1.109.2-exp.0 to 2.27.3 (2.27.4 is outside it); 2.28.0 (2.28.1 is outside it)
- CVE-2026-56353Affects 1.109.2-exp.0 to 1.123.21 (1.123.22 is outside it); 2.0.0 to 2.9.3-exp.0 (2.9.3 is outside it); 2.10.0 (2.10.1 is outside it)
- CVE-2026-56352Affects 1.109.2-exp.0 to 2.19.2 (2.19.3 is outside it)
- CVE-2026-56349Affects 1.109.2-exp.0 to 2.9.4 (2.10.0 is outside it)
- CVE-2026-58661Affects 1.109.2-exp.0 to 1.123.57 (1.123.58 is outside it); 2.0.0 to 2.27.5 (2.28.0 is outside it)
- CVE-2026-56354Affects 1.109.2-exp.0 to 1.123.23 (1.123.24 is outside it); 2.0.0-rc.0 to 2.10.3 (2.10.4 is outside it); 2.11.0 to 2.11.4 (2.12.0 is outside it)
- CVE-2026-59209Affects 1.109.2-exp.0 to 1.123.60 (1.123.61 is outside it); 2.0.0-rc.0 to 2.27.3 (2.27.4 is outside it); 2.28.0 (2.28.1 is outside it)
- CVE-2026-59206Affects 1.109.2-exp.0 to 1.123.60 (1.123.61 is outside it); 2.0.0-rc.0 to 2.27.3 (2.27.4 is outside it); 2.28.0 (2.28.1 is outside it)
- CVE-2026-59208Affects 1.109.2-exp.0 to 2.27.3 (2.27.4 is outside it); 2.28.0 (2.28.1 is outside it)
- CVE-2026-59207Affects 1.109.2-exp.0 to 2.27.3 (2.27.4 is outside it); 2.28.0 (2.28.1 is outside it)
- CVE-2026-59257Affects 1.109.2-exp.0 to 1.123.60 (1.123.61 is outside it); 2.0.0-rc.0 to 2.27.3 (2.27.4 is outside it); 2.28.0 (2.28.1 is outside it)
- CVE-2026-59253Affects 1.109.2-exp.0 to 2.27.5 (2.28.0 is outside it)
- CVE-2026-56778Affects 1.109.2-exp.0 to 2.25.6 (2.25.7 is outside it); 2.26.0 to 2.26.1 (2.26.2 is outside it)
- CVE-2026-56776Affects 1.109.2-exp.0 to 1.123.54 (1.123.55 is outside it); 2.0.0-rc.0 to 2.25.6 (2.25.7 is outside it); 2.26.0 to 2.26.1 (2.26.2 is outside it)
- CVE-2026-56775Affects 1.109.2-exp.0 to 1.123.54 (1.123.55 is outside it); 2.0.0-rc.0 to 2.25.6 (2.25.7 is outside it); 2.26.0 to 2.26.1 (2.26.2 is outside it)
- CVE-2026-56360Affects 1.109.2-exp.0 to 1.123.17 (1.123.18 is outside it); 2.0.0 to 2.6.1 (2.6.2 is outside it)
- CVE-2026-56359Affects 1.109.2-exp.0 to 2.6.3 (2.6.4 is outside it); 2.7.0 to 2.7.5 (2.8.0 is outside it)
- CVE-2025-71380Affects 1.109.2-exp.0 to 1.114.4 (1.115.0 is outside it)
- CVE-2026-56777Affects 1.109.2-exp.0 to 2.25.6 (2.25.7 is outside it); 2.26.0 to 2.26.1 (2.26.2 is outside it)
- CVE-2026-56356Affects 1.109.2-exp.0 to 1.123.26 (1.123.27 is outside it); 2.0.0-rc.0 to 2.13.2 (2.13.3 is outside it); 2.14.0 (2.14.1 is outside it)
- CVE-2026-56350Affects 1.109.2-exp.0 to 2.7.5 (2.8.0 is outside it)
- CVE-2026-56358Affects 1.109.2-exp.0 to 1.123.24 (1.123.25 is outside it); 2.0.0-rc.0 to 2.11.1 (2.11.2 is outside it)
- CVE-2026-56351Affects 1.109.2-exp.0 to 2.3.6 (2.4.0 is outside it)
- CVE-2026-44792Affects 1.109.2-exp.0 to 1.123.42 (1.123.43 is outside it); 2.0.0-rc.0 to 2.20.7-exp.0 (2.20.7 is outside it); 2.21.0 (2.21.1 is outside it)
- CVE-2026-44791Affects 1.109.2-exp.0 to 1.123.42 (1.123.43 is outside it); 2.0.0-rc.0 to 2.20.7-exp.0 (2.20.7 is outside it); 2.21.0 to 2.22.0 (2.22.1 is outside it)
- CVE-2026-44790Affects 1.109.2-exp.0 to 1.123.42 (1.123.43 is outside it); 2.0.0-rc.0 to 2.20.7-exp.0 (2.20.7 is outside it); 2.21.0 to 2.22.0 (2.22.1 is outside it)
- CVE-2026-44789Affects 1.109.2-exp.0 to 1.123.42 (1.123.43 is outside it); 2.0.0-rc.0 to 2.20.7-exp.0 (2.20.7 is outside it); 2.21.0 to 2.22.0 (2.22.1 is outside it)
- CVE-2026-45732Affects 1.109.2-exp.0 to 1.123.42 (1.123.43 is outside it); 2.0.0-rc.0 to 2.20.7-exp.0 (2.20.7 is outside it); 2.21.0 (2.21.1 is outside it)
- CVE-2026-49444Affects 1.109.2-exp.0 to 1.123.47 (1.123.48 is outside it); 2.0.0-rc.0 to 2.21.7 (2.21.8 is outside it); 2.22.0 to 2.22.4-exp.0 (2.22.4 is outside it)
- CVE-2026-49465Affects 1.109.2-exp.0 to 1.123.47 (1.123.48 is outside it); 2.0.0-rc.0 to 2.21.7 (2.21.8 is outside it); 2.22.0 to 2.22.4-exp.0 (2.22.4 is outside it)
- CVE-2026-54304Affects 1.109.2-exp.0 to 1.123.54 (1.123.55 is outside it); 2.0.0-rc.0 to 2.25.6 (2.25.7 is outside it); 2.26.0 (2.26.1 is outside it)
- CVE-2026-54307Affects 1.109.2-exp.0 to 1.123.54 (1.123.55 is outside it); 2.0.0-rc.0 to 2.25.6 (2.25.7 is outside it); 2.26.0 to 2.26.1 (2.26.2 is outside it)
- CVE-2026-54302Affects 1.109.2-exp.0 to 1.123.54 (1.123.55 is outside it); 2.0.0-rc.0 to 2.25.6 (2.25.7 is outside it); 2.26.0 to 2.26.1 (2.26.2 is outside it)
- CVE-2026-54305Affects 1.109.2-exp.0 to 1.123.54 (1.123.55 is outside it); 2.0.0-rc.0 to 2.25.6 (2.25.7 is outside it); 2.26.0 to 2.26.1 (2.26.2 is outside it)
- CVE-2026-54301Affects 1.109.2-exp.0 to 1.123.54 (1.123.55 is outside it); 2.0.0-rc.0 to 2.25.6 (2.25.7 is outside it); 2.26.0 to 2.26.1 (2.26.2 is outside it)
- CVE-2026-54306Affects 1.109.2-exp.0 to 2.25.6 (2.25.7 is outside it); 2.26.0 to 2.26.1 (2.26.2 is outside it)
- CVE-2026-54308Affects 1.109.2-exp.0 to 2.25.6 (2.25.7 is outside it); 2.26.0 to 2.26.1 (2.26.2 is outside it)
- CVE-2026-54311Affects 1.109.2-exp.0 to 2.25.6 (2.25.7 is outside it); 2.26.0 to 2.26.1 (2.26.2 is outside it)
- CVE-2026-54310Affects 1.109.2-exp.0 to 2.25.6 (2.25.7 is outside it); 2.26.0 to 2.26.1 (2.26.2 is outside it)
- CVE-2026-54309Affects 1.109.2-exp.0 to 2.25.6 (2.25.7 is outside it); 2.26.0 to 2.26.1 (2.26.2 is outside it)
- CVE-2026-54314Affects 1.109.2-exp.0 to 2.23.4 (2.24.0 is outside it)
- CVE-2026-54312Affects 1.109.2-exp.0 to 2.23.4 (2.24.0 is outside it)
- CVE-2026-54303Affects 1.109.2-exp.0 to 2.23.4 (2.24.0 is outside it)
- CVE-2026-54313Affects 1.109.2-exp.0 to 2.23.4 (2.24.0 is outside it)
- CVE-2026-56357Affects 1.109.2-exp.0 to 1.123.14 (1.123.15 is outside it); 2.0.0 to 2.4.8 (2.5.0 is outside it)
- CVE-2026-56348Affects 1.109.2-exp.0 to 2.19.5 (2.20.0 is outside it)
- CVE-2026-42237Affects 1.109.2-exp.0 to 1.123.31 (1.123.32 is outside it); 2.0.0 to 2.17.3 (2.17.4 is outside it); 2.18.0 (2.18.1 is outside it)
- CVE-2026-42236Affects 1.109.2-exp.0 to 1.123.31 (1.123.32 is outside it); 2.0.0 to 2.17.3 (2.17.4 is outside it); 2.18.0 (2.18.1 is outside it)
- CVE-2026-42235Affects 1.109.2-exp.0 to 1.123.31 (1.123.32 is outside it); 2.17.0 to 2.17.3 (2.17.4 is outside it); 2.18.0 (2.18.1 is outside it)
- CVE-2026-42234Affects 1.109.2-exp.0 to 1.123.31 (1.123.32 is outside it); 2.17.0 to 2.17.3 (2.17.4 is outside it); 2.18.0 (2.18.1 is outside it)
- CVE-2026-42233Affects 1.109.2-exp.0 to 1.123.31 (1.123.32 is outside it); 2.0.0 to 2.17.3 (2.17.4 is outside it); 2.18.0 (2.18.1 is outside it)
- CVE-2026-42232Affects 1.109.2-exp.0 to 1.123.31 (1.123.32 is outside it); 2.17.0 to 2.17.3 (2.17.4 is outside it); 2.18.0 (2.18.1 is outside it)
- CVE-2026-42231Affects 1.109.2-exp.0 to 1.123.31 (1.123.32 is outside it); 2.17.0 to 2.17.3 (2.17.4 is outside it); 2.18.0 (2.18.1 is outside it)
- CVE-2026-42230Affects 1.109.2-exp.0 to 1.123.31 (1.123.32 is outside it); 2.0.0 to 2.17.3 (2.17.4 is outside it); 2.18.0 (2.18.1 is outside it)
- CVE-2026-42229Affects 1.109.2-exp.0 to 1.123.31 (1.123.32 is outside it); 2.0.0 to 2.17.3 (2.17.4 is outside it); 2.18.0 (2.18.1 is outside it)
- CVE-2026-42228Affects 1.109.2-exp.0 to 1.123.31 (1.123.32 is outside it); 2.0.0 to 2.17.3 (2.17.4 is outside it); 2.18.0 (2.18.1 is outside it)
- CVE-2026-42227Affects 1.109.2-exp.0 to 1.123.31 (1.123.32 is outside it); 2.0.0 to 2.17.3 (2.17.4 is outside it); 2.18.0 (2.18.1 is outside it)
- CVE-2026-42226Affects 1.109.2-exp.0 to 1.123.32 (1.123.33 is outside it); 2.17.0 to 2.17.4 (2.17.5 is outside it)
- CVE-2026-33751Affects 1.109.2-exp.0 to 1.123.26 (1.123.27 is outside it); 2.0.0-rc.0 to 2.13.2 (2.13.3 is outside it); 2.14.0 (2.14.1 is outside it)
- CVE-2026-33749Affects 1.109.2-exp.0 to 1.123.26 (1.123.27 is outside it); 2.0.0-rc.0 to 2.13.2 (2.13.3 is outside it); 2.14.0 (2.14.1 is outside it)
- CVE-2026-33724Affects 1.109.2-exp.0 to 2.4.8 (2.5.0 is outside it)
- CVE-2026-33722Affects 1.109.2-exp.0 to 1.123.22 (1.123.23 is outside it); 2.0.0-rc.0 to 2.6.3 (2.6.4 is outside it)
- CVE-2026-33720Affects 1.109.2-exp.0 to 2.7.5 (2.8.0 is outside it)
- CVE-2026-33713Affects 1.109.2-exp.0 to 1.123.25 (1.123.26 is outside it); 2.0.0-rc.0 to 2.13.2 (2.13.3 is outside it); 2.14.0 (2.14.1 is outside it)
- CVE-2026-33696Affects 1.109.2-exp.0 to 1.123.26 (1.123.27 is outside it); 2.0.0-rc.0 to 2.13.2 (2.13.3 is outside it); 2.14.0 (2.14.1 is outside it)
- CVE-2026-33665Affects 1.109.2-exp.0 to 1.120.4 (1.121.0 is outside it); 2.0.0-rc.0 to 2.3.6 (2.4.0 is outside it)
- CVE-2026-33663Affects 1.109.2-exp.0 to 1.123.26 (1.123.27 is outside it); 2.0.0-rc.0 to 2.13.2 (2.13.3 is outside it); 2.14.0 (2.14.1 is outside it)
- CVE-2026-33660Affects 1.109.2-exp.0 to 1.123.26 (1.123.27 is outside it); 2.0.0-rc.0 to 2.13.2 (2.13.3 is outside it); 2.14.0 (2.14.1 is outside it)
- CVE-2026-27496Affects 1.109.2-exp.0 to 1.123.21 (1.123.22 is outside it); 2.0.0-rc.0 to 2.9.3-exp.0 (2.9.3 is outside it); 2.10.0 (2.10.1 is outside it)
- CVE-2026-27498Affects 1.109.2-exp.0 to 1.123.7 (1.123.8 is outside it); 2.0.0 to 2.1.5 (2.2.0 is outside it)
- CVE-2026-27578Affects 1.109.2-exp.0 to 1.123.21 (1.123.22 is outside it); 2.0.0 to 2.9.3-exp.0 (2.9.3 is outside it); 2.10.0 (2.10.1 is outside it)
- CVE-2026-27577Affects 1.109.2-exp.0 to 1.123.21 (1.123.22 is outside it); 2.0.0 to 2.9.3-exp.0 (2.9.3 is outside it); 2.10.0 (2.10.1 is outside it)
- CVE-2026-27497Affects 1.109.2-exp.0 to 1.123.21 (1.123.22 is outside it); 2.0.0 to 2.9.3-exp.0 (2.9.3 is outside it); 2.10.0 (2.10.1 is outside it)
- CVE-2026-27495Affects 1.109.2-exp.0 to 1.123.21 (1.123.22 is outside it); 2.0.0 to 2.9.3-exp.0 (2.9.3 is outside it); 2.10.0 (2.10.1 is outside it)
- CVE-2026-27494Affects 1.109.2-exp.0 to 1.123.21 (1.123.22 is outside it); 2.0.0 to 2.9.3-exp.0 (2.9.3 is outside it); 2.10.0 (2.10.1 is outside it)
- CVE-2026-27493Affects 1.109.2-exp.0 to 1.123.21 (1.123.22 is outside it); 2.0.0 to 2.9.3-exp.0 (2.9.3 is outside it); 2.10.0 (2.10.1 is outside it)
- CVE-2026-25631Affects 1.109.2-exp.0 to 1.120.4 (1.121.0 is outside it)
- CVE-2026-21893Affects 1.109.2-exp.0 to 1.120.2 (1.120.3 is outside it)
- CVE-2026-25115Affects 1.109.2-exp.0 to 2.4.8-exp.0 (2.4.8 is outside it)
- CVE-2026-25056Affects 1.109.2-exp.0 to 1.117.3 (1.118.0 is outside it); 2.0.0 to 2.3.6 (2.4.0 is outside it)
- CVE-2026-25055Affects 1.109.2-exp.0 to 1.123.11 (1.123.12 is outside it); 2.0.0 to 2.3.6 (2.4.0 is outside it)
- CVE-2026-25054Affects 1.109.2-exp.0 to 1.123.8 (1.123.9 is outside it); 2.0.0 to 2.2.0 (2.2.1 is outside it)
- CVE-2026-25053Affects 1.109.2-exp.0 to 1.123.9 (1.123.10 is outside it); 2.0.0 to 2.4.8 (2.5.0 is outside it)
- CVE-2026-25052Affects 1.109.2-exp.0 to 1.123.17 (1.123.18 is outside it); 2.0.0 to 2.4.8 (2.5.0 is outside it)
- CVE-2026-25051Affects 1.109.2-exp.0 to 1.122.4 (1.122.5 is outside it); 1.123.0 to 1.123.1 (1.123.2 is outside it)
- CVE-2025-61917Affects 1.109.2-exp.0 to 1.114.2 (1.114.3 is outside it)
- CVE-2026-25049Affects 1.109.2-exp.0 to 1.123.16 (1.123.17 is outside it); 2.0.0 to 2.5.1 (2.5.2 is outside it)
- CVE-2026-1470Affects 1.109.2-exp.0 to 1.123.16 (1.123.17 is outside it); 2.0.0 to 2.4.4 (2.4.5 is outside it); 2.5.0 (2.5.1 is outside it)
- CVE-2026-0863Affects 1.109.2-exp.0 to 1.123.13 (1.123.14 is outside it); 2.0.0 to 2.3.4 (2.3.5 is outside it); 2.4.0 to 2.4.1 (2.4.2 is outside it)
- CVE-2025-68949Affects 1.109.2-exp.0 to 2.1.5 (2.2.0 is outside it)
- CVE-2026-21894Affects 1.109.2-exp.0 to 2.2.1 (2.2.2 is outside it)
- CVE-2026-21877Affects 1.109.2-exp.0 to 1.121.3-exp.0 (1.121.3 is outside it)
- CVE-2026-21858Affects 1.109.2-exp.0 to 1.120.4 (1.121.0 is outside it)
- CVE-2025-68697Affects 1.109.2-exp.0 to 2.0.0-rc.4 (2.0.0 is outside it)
- CVE-2025-68668Affects 1.109.2-exp.0 to 2.0.0-rc.4 (2.0.0 is outside it)
- CVE-2025-61914Affects 1.109.2-exp.0 to 1.113.3 (1.114.0 is outside it)
- CVE-2025-68613Affects 1.109.2-exp.0 to 1.120.3 (1.120.4 is outside it); 1.121.0 (1.121.1 is outside it)
- CVE-2025-65964Affects 1.109.2-exp.0 to 1.119.1 (1.119.2 is outside it)
- CVE-2025-62726Affects 1.109.2-exp.0 to 1.112.6 (1.113.0 is outside it)
- CVE-2025-58177No published release is affectedNo published release is affected
- CVE-2025-57749No published release is affectedNo published release is affected
- CVE-2025-52478No published release is affectedNo published release is affected
- CVE-2025-52554No published release is affectedNo published release is affected
- CVE-2025-49595No published release is affectedNo published release is affected
- CVE-2025-49592No published release is affectedNo published release is affected
- CVE-2025-46343No published release is affectedNo published release is affected
- CVE-2023-27564No published release is affectedNo published release is affected
- CVE-2023-27563No published release is affectedNo published release is affected
- CVE-2023-27562No published release is affectedNo published release is affected
Advisories 158
- CVE-2026-86075High 8.7
n8n: Unauthenticated Persistent Storage Exhaustion via OAuth Dynamic Client Registration Endpoint
Affected: from 2.38.0, fixed in 2.38.2; fixed in 2.37.7.
Fixed in 2.37.7 (released Sep 2, 2026, 6 days before disclosure) and 2.38.2 (released Sep 2, 2026, 6 days before disclosure).
The latest release, 2.46.6, is not affected.
68% of n8n downloads last week were affected versions (116.3K).
- CVE-2026-86076High 8.7
n8n: Expression Sandbox Escape in Editor-UI Enables Stored Cross-User JavaScript Execution
Affected: fixed in 1.123.76; from 2.38.0, fixed in 2.38.2; from 2.0.0, fixed in 2.37.7.
Fixed in 1.123.76 (released Sep 2, 2026, 6 days before disclosure), 2.37.7 (released Sep 2, 2026, 6 days before disclosure) and 2.38.2 (released Sep 2, 2026, 6 days before disclosure).
The latest release, 2.46.6, is not affected.
67% of n8n downloads last week were affected versions (113.7K).
- CVE-2026-86077Medium 6.3
n8n: Anonymous Approval-Gate Bypass via Reused resumeToken over the Chat WebSocket
Affected: from 2.38.0, fixed in 2.38.2; fixed in 2.37.7.
Fixed in 2.37.7 (released Sep 2, 2026, 6 days before disclosure) and 2.38.2 (released Sep 2, 2026, 6 days before disclosure).
The latest release, 2.46.6, is not affected.
68% of n8n downloads last week were affected versions (116.3K).
- CVE-2026-86078Medium 6.0
n8n: Prototype Pollution via Workflow Structure Summary Can Lead to Denial of Service
Affected: from 2.38.0, fixed in 2.38.2; fixed in 2.37.7.
Fixed in 2.37.7 (released Sep 2, 2026, 6 days before disclosure) and 2.38.2 (released Sep 2, 2026, 6 days before disclosure).
The latest release, 2.46.6, is not affected.
68% of n8n downloads last week were affected versions (116.3K).
- CVE-2026-86079Medium 6.3
n8n: Path Injection in Elasticsearch and ElasticSecurity Nodes via Unencoded Identifiers
Affected: fixed in 1.123.76; from 2.38.0, fixed in 2.38.2; from 2.0.0, fixed in 2.37.7.
Fixed in 1.123.76 (released Sep 2, 2026, 6 days before disclosure), 2.37.7 (released Sep 2, 2026, 6 days before disclosure) and 2.38.2 (released Sep 2, 2026, 6 days before disclosure).
The latest release, 2.46.6, is not affected.
67% of n8n downloads last week were affected versions (113.7K).
- CVE-2026-86080Medium 6.3
n8n: GitHub Trigger 422 Reuse Path Skips Webhook Secret Storage, Causing Signature Verification to Fail-Open
Affected: fixed in 1.123.76; from 2.38.0, fixed in 2.38.2; from 2.0.0, fixed in 2.37.7.
Fixed in 1.123.76 (released Sep 2, 2026, 6 days before disclosure), 2.37.7 (released Sep 2, 2026, 6 days before disclosure) and 2.38.2 (released Sep 2, 2026, 6 days before disclosure).
The latest release, 2.46.6, is not affected.
67% of n8n downloads last week were affected versions (113.7K).
- CVE-2026-86081High 7.1
n8n: Regular Expression Denial of Service in the Default Blocked-File-Pattern Match via a Git Node Clone Path
Affected: fixed in 1.123.76; from 2.38.0, fixed in 2.38.2; from 2.0.0, fixed in 2.37.7.
Fixed in 1.123.76 (released Sep 2, 2026, 6 days before disclosure), 2.37.7 (released Sep 2, 2026, 6 days before disclosure) and 2.38.2 (released Sep 2, 2026, 6 days before disclosure).
The latest release, 2.46.6, is not affected.
67% of n8n downloads last week were affected versions (113.7K).
- CVE-2026-86082High 7.1
n8n: Domain-Restriction Bypass via Unguarded Model-Search Endpoint in OpenAI Chat Model Node
Affected: fixed in 1.123.76; from 2.38.0, fixed in 2.38.2; from 2.0.0, fixed in 2.37.7.
Fixed in 1.123.76 (released Sep 2, 2026, 6 days before disclosure), 2.37.7 (released Sep 2, 2026, 6 days before disclosure) and 2.38.2 (released Sep 2, 2026, 6 days before disclosure).
The latest release, 2.46.6, is not affected.
67% of n8n downloads last week were affected versions (113.7K).
- CVE-2026-86083High 7.7
n8n: Expression Sandbox Escape via Shared Builtin Tampering and Code-Printer Injection Leads to Code Execution
Affected: fixed in 1.123.76; from 2.38.0, fixed in 2.38.2; from 2.0.0, fixed in 2.37.7.
Fixed in 1.123.76 (released Sep 2, 2026, 6 days before disclosure), 2.37.7 (released Sep 2, 2026, 6 days before disclosure) and 2.38.2 (released Sep 2, 2026, 6 days before disclosure).
The latest release, 2.46.6, is not affected.
67% of n8n downloads last week were affected versions (113.7K).
- CVE-2026-86084Medium 6.0
n8n: Disabled OIDC SSO Endpoints Remain Active and Issue Valid Sessions
Affected: fixed in 1.123.76; from 2.38.0, fixed in 2.38.2; from 2.0.0, fixed in 2.37.7.
Fixed in 1.123.76 (released Sep 2, 2026, 6 days before disclosure), 2.37.7 (released Sep 2, 2026, 6 days before disclosure) and 2.38.2 (released Sep 2, 2026, 6 days before disclosure).
The latest release, 2.46.6, is not affected.
67% of n8n downloads last week were affected versions (113.7K).
- CVE-2026-86085Medium 5.1
n8n: Cross-Tenant Project-Member PII Disclosure via Missing Per-Project Scope Check on Role Assignment Endpoints
Affected: from 2.38.0, fixed in 2.38.2; fixed in 2.37.7.
Fixed in 2.37.7 (released Sep 2, 2026, 6 days before disclosure) and 2.38.2 (released Sep 2, 2026, 6 days before disclosure).
The latest release, 2.46.6, is not affected.
68% of n8n downloads last week were affected versions (116.3K).
- CVE-2026-86993Medium 5.9
n8n: Log Streaming Event Destinations Decrypt Generic-Auth Credentials Without Ownership Check
Affected: fixed in 1.123.76; from 2.38.0, fixed in 2.38.2; from 2.0.0, fixed in 2.37.7.
Fixed in 1.123.76 (released Sep 2, 2026, 6 days before disclosure), 2.37.7 (released Sep 2, 2026, 6 days before disclosure) and 2.38.2 (released Sep 2, 2026, 6 days before disclosure).
The latest release, 2.46.6, is not affected.
67% of n8n downloads last week were affected versions (113.7K).
- CVE-2026-86994Medium 5.3
n8n: Cross-User Active Workflow ID and Lifecycle Event Disclosure via Missing userId Filter
Affected: fixed in 1.123.76; from 2.38.0, fixed in 2.38.2; from 2.0.0, fixed in 2.37.7.
Fixed in 1.123.76 (released Sep 2, 2026, 6 days before disclosure), 2.37.7 (released Sep 2, 2026, 6 days before disclosure) and 2.38.2 (released Sep 2, 2026, 6 days before disclosure).
The latest release, 2.46.6, is not affected.
67% of n8n downloads last week were affected versions (113.7K).
- CVE-2026-86995Medium 5.3
n8n: Git Node branch.<name>.remote Config Key Bypasses Sandbox Path Restriction, Enabling Local Git Repository Read
Affected: fixed in 1.123.76; from 2.38.0, fixed in 2.38.2; from 2.0.0, fixed in 2.37.7.
Fixed in 1.123.76 (released Sep 2, 2026, 6 days before disclosure), 2.37.7 (released Sep 2, 2026, 6 days before disclosure) and 2.38.2 (released Sep 2, 2026, 6 days before disclosure).
The latest release, 2.46.6, is not affected.
67% of n8n downloads last week were affected versions (113.7K).
- CVE-2026-86996Medium 5.3
n8n: Agent Workflow Tool Bypasses Sub-Workflow Caller Policy
Affected: from 2.38.0, fixed in 2.38.2; fixed in 2.37.7.
Fixed in 2.37.7 (released Sep 2, 2026, 6 days before disclosure) and 2.38.2 (released Sep 2, 2026, 6 days before disclosure).
The latest release, 2.46.6, is not affected.
68% of n8n downloads last week were affected versions (116.3K).
Show all 158 advisoriesShow fewer advisories
- CVE-2026-86074Medium 5.9
n8n: Instance AI Credential Setup Accepts Unvalidated Probe URL from Fetched Content
Affected: from 2.38.0, fixed in 2.38.2; fixed in 2.37.7.
Fixed in 2.37.7 (released Sep 2, 2026, 6 days before disclosure) and 2.38.2 (released Sep 2, 2026, 6 days before disclosure).
The latest release, 2.46.6, is not affected.
68% of n8n downloads last week were affected versions (116.3K).
- CVE-2026-86073Medium 5.9
n8n: Per-Resource OAuth Consent Bypass via Unbound Refresh Token Resource Substitution
Affected: from 2.38.0, fixed in 2.38.1; fixed in 2.37.7.
Fixed in 2.37.7 (released Sep 2, 2026, 6 days before disclosure) and 2.38.1 (released Sep 1, 2026, 7 days before disclosure).
The latest release, 2.46.6, is not affected.
68% of n8n downloads last week were affected versions (116.1K).
- CVE-2026-71539High 8.9
n8n: Race Condition in Git Clone Node Allows Authenticated Users to Achieve Remote Code Execution
Affected: fixed in 1.123.64; from 2.30.0, fixed in 2.30.1; from 2.0.0-rc.0, fixed in 2.29.8.
Fixed in 1.123.64 (released Jul 8, 2026, 41 days before disclosure), 2.29.8 (released Jul 8, 2026, 41 days before disclosure) and 2.30.1 (released Jul 8, 2026, 41 days before disclosure).
The latest release, 2.46.6, is not affected.
57% of n8n downloads last week were affected versions (97.6K).
- CVE-2026-72775Medium 5.8
n8n before 1.123.67 SQL Injection via PostgresTrigger Node
Affected: fixed in 1.123.67; from 2.32.0, fixed in 2.32.1; from 2.0.0-rc.0, fixed in 2.31.5.
Fixed in 1.123.67 (released Jul 22, 2026, 20 days before disclosure), 2.31.5 (released Jul 22, 2026, 20 days before disclosure) and 2.32.1 (released Jul 22, 2026, 20 days before disclosure).
The latest release, 2.46.6, is not affected.
59% of n8n downloads last week were affected versions (100.7K).
- CVE-2026-72774High 7.1
n8n before 1.123.67 Authentication Bypass via HTTP Request Node
Affected: fixed in 1.123.67; from 2.32.0, fixed in 2.32.1; from 2.0.0-rc.0, fixed in 2.31.5.
Fixed in 1.123.67 (released Jul 22, 2026, 20 days before disclosure), 2.31.5 (released Jul 22, 2026, 20 days before disclosure) and 2.32.1 (released Jul 22, 2026, 20 days before disclosure).
The latest release, 2.46.6, is not affected.
59% of n8n downloads last week were affected versions (100.7K).
- CVE-2026-72773Medium 4.9
n8n before 2.32.1 Path Traversal via computer-use search_files
Affected: from 2.32.0, fixed in 2.32.1; fixed in 2.31.5.
Fixed in 2.31.5 (released Jul 22, 2026, 20 days before disclosure) and 2.32.1 (released Jul 22, 2026, 20 days before disclosure).
The latest release, 2.46.6, is not affected.
61% of n8n downloads last week were affected versions (103.7K).
- CVE-2026-72772High 8.9
n8n before 2.32.1 Authentication Bypass via Token Exchange
Affected: from 2.32.0, fixed in 2.32.1; fixed in 2.31.5.
Fixed in 2.31.5 (released Jul 22, 2026, 20 days before disclosure) and 2.32.1 (released Jul 22, 2026, 20 days before disclosure).
The latest release, 2.46.6, is not affected.
61% of n8n downloads last week were affected versions (103.7K).
- CVE-2026-72771High 7.1
n8n before 2.32.1 Credential Restriction Bypass via AI/LLM Nodes
Affected: from 2.32.0, fixed in 2.32.1; fixed in 2.31.5.
Fixed in 2.31.5 (released Jul 22, 2026, 20 days before disclosure) and 2.32.1 (released Jul 22, 2026, 20 days before disclosure).
The latest release, 2.46.6, is not affected.
61% of n8n downloads last week were affected versions (103.7K).
- CVE-2026-72770High 7.1
n8n before 1.123.67 Path Traversal via Git Node Operations
Affected: fixed in 1.123.67; from 2.32.0, fixed in 2.32.1; from 2.0.0-rc.0, fixed in 2.31.5.
Fixed in 1.123.67 (released Jul 22, 2026, 20 days before disclosure), 2.31.5 (released Jul 22, 2026, 20 days before disclosure) and 2.32.1 (released Jul 22, 2026, 20 days before disclosure).
The latest release, 2.46.6, is not affected.
59% of n8n downloads last week were affected versions (100.7K).
- CVE-2026-72769Medium 6.1
n8n before 1.123.67 Prototype Pollution via VM Expression Engine
Affected: fixed in 1.123.67; from 2.32.0, fixed in 2.32.1; from 2.0.0-rc.0, fixed in 2.31.5.
Fixed in 1.123.67 (released Jul 22, 2026, 20 days before disclosure), 2.31.5 (released Jul 22, 2026, 20 days before disclosure) and 2.32.1 (released Jul 22, 2026, 20 days before disclosure).
The latest release, 2.46.6, is not affected.
59% of n8n downloads last week were affected versions (100.7K).
- CVE-2026-72768Medium 6.4
n8n before 2.32.1 SSRF Protection Bypass via MCP Client
Affected: from 2.32.0, fixed in 2.32.1; fixed in 2.31.5.
Fixed in 2.31.5 (released Jul 22, 2026, 20 days before disclosure) and 2.32.1 (released Jul 22, 2026, 20 days before disclosure).
The latest release, 2.46.6, is not affected.
61% of n8n downloads last week were affected versions (103.7K).
- CVE-2026-72767High 8.7
n8n before 1.123.67 Remote Code Execution via Git node
Affected: fixed in 1.123.67; from 2.32.0, fixed in 2.32.1; from 2.0.0-rc.0, fixed in 2.31.5.
Fixed in 1.123.67 (released Jul 22, 2026, 20 days before disclosure), 2.31.5 (released Jul 22, 2026, 20 days before disclosure) and 2.32.1 (released Jul 22, 2026, 20 days before disclosure).
The latest release, 2.46.6, is not affected.
59% of n8n downloads last week were affected versions (100.7K).
- CVE-2026-72766High 8.2
n8n before 1.123.67 Arbitrary File Read via Send Email Node
Affected: fixed in 1.123.67; from 2.32.0, fixed in 2.32.1; from 2.0.0-rc.0, fixed in 2.31.5.
Fixed in 1.123.67 (released Jul 22, 2026, 20 days before disclosure), 2.31.5 (released Jul 22, 2026, 20 days before disclosure) and 2.32.1 (released Jul 22, 2026, 20 days before disclosure).
The latest release, 2.46.6, is not affected.
59% of n8n downloads last week were affected versions (100.7K).
- CVE-2026-72765High 8.7
n8n before 2.32.1 Remote Code Execution via Expression Sandbox Escape
Affected: from 2.32.0, fixed in 2.32.1; fixed in 2.31.5.
Fixed in 2.31.5 (released Jul 22, 2026, 20 days before disclosure) and 2.32.1 (released Jul 22, 2026, 20 days before disclosure).
The latest release, 2.46.6, is not affected.
61% of n8n downloads last week were affected versions (103.7K).
- CVE-2026-72764Medium 5.8
n8n before 1.123.67 Module Cache Poisoning via Code Node
Affected: fixed in 1.123.67; from 2.32.0, fixed in 2.32.1; from 2.0.0-rc.0, fixed in 2.31.5.
Fixed in 1.123.67 (released Jul 22, 2026, 20 days before disclosure), 2.31.5 (released Jul 22, 2026, 20 days before disclosure) and 2.32.1 (released Jul 22, 2026, 20 days before disclosure).
The latest release, 2.46.6, is not affected.
59% of n8n downloads last week were affected versions (100.7K).
- CVE-2026-72763High 7.2
n8n before 1.123.67 Credential Exfiltration via Sub-Workflow
Affected: fixed in 1.123.67; from 2.32.0, fixed in 2.32.1; from 2.0.0-rc.0, fixed in 2.31.5.
Fixed in 1.123.67 (released Jul 22, 2026, 20 days before disclosure), 2.31.5 (released Jul 22, 2026, 20 days before disclosure) and 2.32.1 (released Jul 22, 2026, 20 days before disclosure).
The latest release, 2.46.6, is not affected.
59% of n8n downloads last week were affected versions (100.7K).
- CVE-2026-72762High 7.7
n8n before 1.123.67 Arbitrary File Write via Edit Image Node
Affected: fixed in 1.123.67; from 2.32.0, fixed in 2.32.1; from 2.0.0-rc.0, fixed in 2.31.5.
Fixed in 1.123.67 (released Jul 22, 2026, 20 days before disclosure), 2.31.5 (released Jul 22, 2026, 20 days before disclosure) and 2.32.1 (released Jul 22, 2026, 20 days before disclosure).
The latest release, 2.46.6, is not affected.
59% of n8n downloads last week were affected versions (100.7K).
- CVE-2026-72750Medium 5.3
n8n before 1.123.67 SQL Injection via executeQuery Operation
Affected: fixed in 1.123.67; from 2.32.0, fixed in 2.32.1; from 2.0.0-rc.0, fixed in 2.31.5.
Fixed in 1.123.67 (released Jul 22, 2026, 20 days before disclosure), 2.31.5 (released Jul 22, 2026, 20 days before disclosure) and 2.32.1 (released Jul 22, 2026, 20 days before disclosure).
The latest release, 2.46.6, is not affected.
59% of n8n downloads last week were affected versions (100.7K).
- CVE-2026-72749High 7.1
n8n before 1.123.67 Prototype Pollution via Edit Fields
Affected: fixed in 1.123.67; from 2.32.0, fixed in 2.32.1; from 2.0.0-rc.0, fixed in 2.31.5.
Fixed in 1.123.67 (released Jul 22, 2026, 20 days before disclosure), 2.31.5 (released Jul 22, 2026, 20 days before disclosure) and 2.32.1 (released Jul 22, 2026, 20 days before disclosure).
The latest release, 2.46.6, is not affected.
59% of n8n downloads last week were affected versions (100.7K).
- CVE-2026-65599Medium 5.1
n8n before 1.123.64, 2.29.8, and 2.30.1 Credential Exposure via JWT Header
Affected: fixed in 1.123.64; from 2.30.0, fixed in 2.30.1; from 2.0.0-rc.0, fixed in 2.29.8.
Fixed in 1.123.64 (released Jul 8, 2026, 14 days before disclosure), 2.29.8 (released Jul 8, 2026, 14 days before disclosure) and 2.30.1 (released Jul 8, 2026, 14 days before disclosure).
The latest release, 2.46.6, is not affected.
57% of n8n downloads last week were affected versions (97.6K).
- CVE-2026-65598High 8.9
n8n before 1.123.64 Remote Code Execution via Git Clone
Affected: fixed in 1.123.64; from 2.30.0, fixed in 2.30.1; from 2.0.0-rc.0, fixed in 2.29.8.
Fixed in 1.123.64 (released Jul 8, 2026, 14 days before disclosure), 2.29.8 (released Jul 8, 2026, 14 days before disclosure) and 2.30.1 (released Jul 8, 2026, 14 days before disclosure).
The latest release, 2.46.6, is not affected.
57% of n8n downloads last week were affected versions (97.6K).
- CVE-2026-65597High 8.2
n8n before 1.123.64 DOM-Based XSS via Unsandboxed iframe
Affected: fixed in 1.123.64; from 2.30.0, fixed in 2.30.1; from 2.0.0-rc.0, fixed in 2.29.8.
Fixed in 1.123.64 (released Jul 8, 2026, 14 days before disclosure), 2.29.8 (released Jul 8, 2026, 14 days before disclosure) and 2.30.1 (released Jul 8, 2026, 14 days before disclosure).
The latest release, 2.46.6, is not affected.
57% of n8n downloads last week were affected versions (97.6K).
- CVE-2026-65596Medium 5.1
n8n before 1.123.64 Credential Exfiltration via GraphQL Node
Affected: fixed in 1.123.64; from 2.30.0, fixed in 2.30.1; from 2.0.0, fixed in 2.29.8.
Fixed in 1.123.64 (released Jul 8, 2026, 14 days before disclosure), 2.29.8 (released Jul 8, 2026, 14 days before disclosure) and 2.30.1 (released Jul 8, 2026, 14 days before disclosure).
The latest release, 2.46.6, is not affected.
57% of n8n downloads last week were affected versions (97.5K).
- CVE-2026-65595High 8.9
n8n before 2.29.8 and 2.30.1 Privilege Escalation via Token Exchange
Affected: from 2.30.0, fixed in 2.30.1; fixed in 2.29.8.
Fixed in 2.29.8 (released Jul 8, 2026, 14 days before disclosure) and 2.30.1 (released Jul 8, 2026, 14 days before disclosure).
The latest release, 2.46.6, is not affected.
59% of n8n downloads last week were affected versions (100.7K).
- CVE-2026-65594Medium 5.1
n8n before 2.30.1 Missing OAuth Authorization Check
Affected: from 2.30.0, fixed in 2.30.1; fixed in 2.29.8.
Fixed in 2.29.8 (released Jul 8, 2026, 14 days before disclosure) and 2.30.1 (released Jul 8, 2026, 14 days before disclosure).
The latest release, 2.46.6, is not affected.
59% of n8n downloads last week were affected versions (100.7K).
- CVE-2026-65593Medium 6.3
n8n before 1.123.64, 2.29.8, and 2.30.1 SSRF via Dynamic Node Parameters
Affected: fixed in 1.123.64; from 2.30.0, fixed in 2.30.1; from 2.0.0-rc.0, fixed in 2.29.8.
Fixed in 1.123.64 (released Jul 8, 2026, 14 days before disclosure), 2.29.8 (released Jul 8, 2026, 14 days before disclosure) and 2.30.1 (released Jul 8, 2026, 14 days before disclosure).
The latest release, 2.46.6, is not affected.
57% of n8n downloads last week were affected versions (97.6K).
- CVE-2026-65592High 8.4
n8n before 1.123.64 Stored DOM XSS via cachedResultUrl
Affected: fixed in 1.123.64; from 2.30.0, fixed in 2.30.1; from 2.0.0-rc.0, fixed in 2.29.8.
Fixed in 1.123.64 (released Jul 8, 2026, 14 days before disclosure), 2.29.8 (released Jul 8, 2026, 14 days before disclosure) and 2.30.1 (released Jul 8, 2026, 14 days before disclosure).
The latest release, 2.46.6, is not affected.
57% of n8n downloads last week were affected versions (97.6K).
- CVE-2026-65591High 8.9
n8n before 1.123.64 Sanitizer Bypass Remote Code Execution
Affected: fixed in 1.123.64; from 2.30.0, fixed in 2.30.1; from 2.0.0-rc.0, fixed in 2.29.8.
Fixed in 1.123.64 (released Jul 8, 2026, 14 days before disclosure), 2.29.8 (released Jul 8, 2026, 14 days before disclosure) and 2.30.1 (released Jul 8, 2026, 14 days before disclosure).
The latest release, 2.46.6, is not affected.
57% of n8n downloads last week were affected versions (97.6K).
- CVE-2026-65590Medium 5.5
n8n before 2.30.1 Shell Sandbox Bypass on Linux Windows
Affected: from 2.30.0, fixed in 2.30.1; fixed in 2.29.8.
Fixed in 2.29.8 (released Jul 8, 2026, 14 days before disclosure) and 2.30.1 (released Jul 8, 2026, 14 days before disclosure).
The latest release, 2.46.6, is not affected.
59% of n8n downloads last week were affected versions (100.7K).
- CVE-2026-65589Medium 5.1
n8n before 1.123.64 Credential Exposure via LLM Node Execution Data
Affected: fixed in 1.123.64; from 2.30.0, fixed in 2.30.1; from 2.0.0-rc.0, fixed in 2.29.8.
Fixed in 1.123.64 (released Jul 8, 2026, 14 days before disclosure), 2.29.8 (released Jul 8, 2026, 14 days before disclosure) and 2.30.1 (released Jul 8, 2026, 14 days before disclosure).
The latest release, 2.46.6, is not affected.
57% of n8n downloads last week were affected versions (97.6K).
- CVE-2026-65016High 7.7
n8n before 1.123.64, 2.29.8, and 2.30.1 Privilege Escalation via SSO Instance-Role
Affected: fixed in 1.123.64; from 2.30.0, fixed in 2.30.1; from 2.0.0-rc.0, fixed in 2.29.8.
Fixed in 1.123.64 (released Jul 8, 2026, 14 days before disclosure), 2.29.8 (released Jul 8, 2026, 14 days before disclosure) and 2.30.1 (released Jul 8, 2026, 14 days before disclosure).
The latest release, 2.46.6, is not affected.
57% of n8n downloads last week were affected versions (97.6K).
- CVE-2026-65015High 7.2
n8n before 2.30.1 Privilege Escalation via run_node_tool
Affected: from 2.30.0, fixed in 2.30.1; fixed in 2.29.8.
Fixed in 2.29.8 (released Jul 8, 2026, 14 days before disclosure) and 2.30.1 (released Jul 8, 2026, 14 days before disclosure).
The latest release, 2.46.6, is not affected.
59% of n8n downloads last week were affected versions (100.7K).
- CVE-2026-65014Medium 6.3
n8n before 2.28.0 Authentication Bypass via test-webhook
Affected: fixed in 2.27.4.
Fixed in 2.27.4 (released Jun 24, 2026, 28 days before disclosure).
The latest release, 2.46.6, is not affected.
58% of n8n downloads last week were affected versions (98.9K).
- CVE-2026-59259Medium 6.0
n8n - Permission Bypass via Expression Parser Mismatch in External Secrets
Affected: fixed in 1.123.61; from 2.28.0, fixed in 2.28.1; from 2.0.0-rc.0, fixed in 2.27.4.
Fixed in 1.123.61 (released Jun 24, 2026, 21 days before disclosure), 2.27.4 (released Jun 24, 2026, 21 days before disclosure) and 2.28.1 (released Jun 24, 2026, 21 days before disclosure).
The latest release, 2.46.6, is not affected.
56% of n8n downloads last week were affected versions (95.7K).
- CVE-2026-59254Medium 6.3
n8n - External Secrets Disclosure via Workflow Node Expressions
Affected: from 2.28.0, fixed in 2.28.1; fixed in 2.27.4.
Fixed in 2.27.4 (released Jun 24, 2026, 21 days before disclosure) and 2.28.1 (released Jun 24, 2026, 21 days before disclosure).
The latest release, 2.46.6, is not affected.
58% of n8n downloads last week were affected versions (99K).
- CVE-2026-56353Medium 6.3
n8n - Authentication Bypass in Chat Trigger Node
Affected: fixed in 1.123.22; from 2.0.0, fixed in 2.9.3; from 2.10.0, fixed in 2.10.1.
Fixed in 1.123.22 (released Feb 25, 2026, 140 days before disclosure), 2.9.3 (released Feb 25, 2026, 140 days before disclosure) and 2.10.1 (released Feb 25, 2026, 140 days before disclosure).
The latest release, 2.46.6, is not affected.
49% of n8n downloads last week were affected versions (82.8K).
- CVE-2026-56352Medium 5.3
n8n - Arbitrary File Read and Execution via ExecuteWorkflow localFile Parameter
Affected: fixed in 2.19.3.
Fixed in 2.19.3 (released May 6, 2026, 70 days before disclosure).
The latest release, 2.46.6, is not affected.
54% of n8n downloads last week were affected versions (92.4K).
- CVE-2026-56349Medium 6.3
n8n - Guardrail Node Bypass via Crafted Input
Affected: fixed in 2.10.0.
Fixed in 2.10.0 (released Feb 23, 2026, 142 days before disclosure).
The latest release, 2.46.6, is not affected.
52% of n8n downloads last week were affected versions (88.6K).
- CVE-2026-58661Medium 5.3
n8n - Disk Space Exhaustion via Data-Table File Upload Endpoint
Affected: from 2.0.0, fixed in 2.28.0; fixed in 1.123.58.
Fixed in 1.123.58 (released Jun 18, 2026, 22 days before disclosure) and 2.28.0 (released Jun 23, 2026, 17 days before disclosure).
The latest release, 2.46.6, is not affected.
57% of n8n downloads last week were affected versions (96.3K).
- CVE-2026-56354Medium 5.1
n8n - Cross-Site Scripting and Open Redirect in Form Node
Affected: from 2.11.0, fixed in 2.12.0; from 2.0.0-rc.0, fixed in 2.10.4; fixed in 1.123.24.
Fixed in 1.123.24 (released Mar 11, 2026, 121 days before disclosure), 2.10.4 (released Mar 6, 2026, 126 days before disclosure) and 2.12.0 (released Mar 9, 2026, 123 days before disclosure).
The latest release, 2.46.6, is not affected.
49% of n8n downloads last week were affected versions (83.9K).
- CVE-2026-59209High 7.1
n8n: Shared Credential Header Leak via HTTP Request Pagination Expression
Affected: fixed in 1.123.61; from 2.28.0, fixed in 2.28.1; from 2.0.0-rc.0, fixed in 2.27.4.
Fixed in 1.123.61 (released Jun 24, 2026, 15 days before disclosure), 2.27.4 (released Jun 24, 2026, 15 days before disclosure) and 2.28.1 (released Jun 24, 2026, 15 days before disclosure).
The latest release, 2.46.6, is not affected.
56% of n8n downloads last week were affected versions (95.7K).
- CVE-2026-59206High 7.1
n8n: Prototype Pollution via Workflow Credentials Leads to Unauthenticated User and Project Enumeration
Affected: fixed in 1.123.61; from 2.28.0, fixed in 2.28.1; from 2.0.0-rc.0, fixed in 2.27.4.
Fixed in 1.123.61 (released Jun 24, 2026, 15 days before disclosure), 2.27.4 (released Jun 24, 2026, 15 days before disclosure) and 2.28.1 (released Jun 24, 2026, 15 days before disclosure).
The latest release, 2.46.6, is not affected.
56% of n8n downloads last week were affected versions (95.7K).
- CVE-2026-59208High 7.6
n8n: Cross-Issuer Token Exchange Account Binding via Subject-Only Identity Resolution
Affected: from 2.28.0, fixed in 2.28.1; fixed in 2.27.4.
Fixed in 2.27.4 (released Jun 24, 2026, 15 days before disclosure) and 2.28.1 (released Jun 24, 2026, 15 days before disclosure).
The latest release, 2.46.6, is not affected.
58% of n8n downloads last week were affected versions (99K).
- CVE-2026-59207High 7.1
n8n: "Allowed HTTP Request Domains" Restriction Bypass via AI Agents MCP Connector
Affected: from 2.28.0, fixed in 2.28.1; fixed in 2.27.4.
Fixed in 2.27.4 (released Jun 24, 2026, 15 days before disclosure) and 2.28.1 (released Jun 24, 2026, 15 days before disclosure).
The latest release, 2.46.6, is not affected.
58% of n8n downloads last week were affected versions (99K).
- CVE-2026-59257Medium 5.3
n8n - SQL Injection in MySQL v1 executeQuery Operation via Expression Interpolation
Affected: fixed in 1.123.61; from 2.28.0, fixed in 2.28.1; from 2.0.0-rc.0, fixed in 2.27.4.
Fixed in 1.123.61 (released Jun 24, 2026, 14 days before disclosure), 2.27.4 (released Jun 24, 2026, 14 days before disclosure) and 2.28.1 (released Jun 24, 2026, 14 days before disclosure).
The latest release, 2.46.6, is not affected.
56% of n8n downloads last week were affected versions (95.7K).
- CVE-2026-59253Medium 5.3
n8n - Improper Authorization in Workflow Assignment to Folders
Affected: fixed in 2.28.0.
Fixed in 2.28.0 (released Jun 23, 2026, 15 days before disclosure).
The latest release, 2.46.6, is not affected.
59% of n8n downloads last week were affected versions (99.8K).
- CVE-2026-56778Medium 5.3
n8n - Authorization Bypass in Public API Execution Retry Endpoint
Affected: from 2.26.0, fixed in 2.26.2; fixed in 2.25.7.
Fixed in 2.25.7 (released Jun 10, 2026, 28 days before disclosure) and 2.26.2 (released Jun 10, 2026, 28 days before disclosure).
The latest release, 2.46.6, is not affected.
57% of n8n downloads last week were affected versions (96.9K).
- CVE-2026-56776Medium 5.3
n8n - Incorrect OAuth Scope Validation in Workflow Test Run Endpoint
Affected: fixed in 1.123.55; from 2.26.0, fixed in 2.26.2; from 2.0.0-rc.0, fixed in 2.25.7.
Fixed in 1.123.55 (released Jun 10, 2026, 28 days before disclosure), 2.25.7 (released Jun 10, 2026, 28 days before disclosure) and 2.26.2 (released Jun 10, 2026, 28 days before disclosure).
The latest release, 2.46.6, is not affected.
55% of n8n downloads last week were affected versions (93.3K).
- CVE-2026-56775Medium 5.3
n8n - Incorrect OAuth Scope Validation in Evaluation Test Runs Endpoints
Affected: fixed in 1.123.55; from 2.26.0, fixed in 2.26.2; from 2.0.0-rc.0, fixed in 2.25.7.
Fixed in 1.123.55 (released Jun 10, 2026, 28 days before disclosure), 2.25.7 (released Jun 10, 2026, 28 days before disclosure) and 2.26.2 (released Jun 10, 2026, 28 days before disclosure).
The latest release, 2.46.6, is not affected.
55% of n8n downloads last week were affected versions (93.3K).
- CVE-2026-56360Medium 6.3
n8n - Webhook Forgery via Unsigned POST Requests in ZendeskTrigger
Affected: fixed in 1.123.18; from 2.0.0, fixed in 2.6.2.
Fixed in 1.123.18 (released Jan 29, 2026, 160 days before disclosure) and 2.6.2 (released Jan 28, 2026, 161 days before disclosure).
The latest release, 2.46.6, is not affected.
47% of n8n downloads last week were affected versions (79.8K).
- CVE-2026-56359Medium 4.8
n8n - Cross-Site Scripting in Credential Management OAuth2 Authorization URL
Affected: from 2.7.0, fixed in 2.8.0; fixed in 2.6.4.
Fixed in 2.6.4 (released Feb 6, 2026, 152 days before disclosure) and 2.8.0 (released Feb 10, 2026, 148 days before disclosure).
The latest release, 2.46.6, is not affected.
51% of n8n downloads last week were affected versions (86.3K).
- CVE-2025-71380High 8.7
n8n - Arbitrary Command Execution via Execute Command Node
Affected: through 1.114.4.
Fixed in 1.115.0 (released Oct 6, 2025, 271 days before disclosure), the first release outside every affected range (no listed fixed version clears them all).
The latest release, 2.46.6, is not affected.
34% of n8n downloads last week were affected versions (57.6K).
- CVE-2026-56777Medium 5.3
n8n - AST Validator Bypass in Python Code Node
Affected: from 2.26.0, fixed in 2.26.2; fixed in 2.25.7.
Fixed in 2.25.7 (released Jun 10, 2026, 20 days before disclosure) and 2.26.2 (released Jun 10, 2026, 20 days before disclosure).
The latest release, 2.46.6, is not affected.
57% of n8n downloads last week were affected versions (96.9K).
- CVE-2026-56356Medium 5.1
n8n - Stored Cross-Site Scripting in Chat Trigger Node Custom CSS Field
Affected: fixed in 1.123.27; from 2.14.0, fixed in 2.14.1; from 2.0.0-rc.0, fixed in 2.13.3.
Fixed in 1.123.27 (released Mar 25, 2026, 97 days before disclosure), 2.13.3 (released Mar 25, 2026, 97 days before disclosure) and 2.14.1 (released Mar 25, 2026, 97 days before disclosure).
The latest release, 2.46.6, is not affected.
50% of n8n downloads last week were affected versions (84.7K).
- CVE-2026-56350Medium 6.0
n8n - SSO Enforcement Bypass via API
Affected: fixed in 2.8.0.
Fixed in 2.8.0 (released Feb 10, 2026, 140 days before disclosure).
The latest release, 2.46.6, is not affected.
51% of n8n downloads last week were affected versions (86.5K).
- CVE-2026-56358Medium 5.1
n8n - Stored Cross-Site Scripting in Form Trigger Node
Affected: from 2.0.0-rc.0, fixed in 2.11.2; fixed in 1.123.25.
Fixed in 1.123.25 (released Mar 13, 2026, 103 days before disclosure) and 2.11.2 (released Mar 9, 2026, 107 days before disclosure).
The latest release, 2.46.6, is not affected.
49% of n8n downloads last week were affected versions (83.8K).
- CVE-2026-56351Medium 5.3
n8n - SQL Injection in MySQL, PostgreSQL, and Microsoft SQL Nodes
Affected: fixed in 2.4.0.
Fixed in 2.4.0 (released Jan 12, 2026, 163 days before disclosure).
The latest release, 2.46.6, is not affected.
50% of n8n downloads last week were affected versions (84.5K).
- CVE-2026-44792High 8.9
n8n: Source Control Pull SQL Injection
Affected: fixed in 1.123.43; from 2.21.0, fixed in 2.21.1; from 2.0.0-rc.0, fixed in 2.20.7.
Fixed in 1.123.43 (released May 13, 2026, 41 days before disclosure), 2.20.7 (released May 13, 2026, 41 days before disclosure) and 2.21.1 (released May 13, 2026, 41 days before disclosure).
The latest release, 2.46.6, is not affected.
52% of n8n downloads last week were affected versions (88.7K).
- CVE-2026-44791Critical 9.4
n8n: XML Node Prototype Pollution Patch Bypass
Affected: fixed in 1.123.43; from 2.21.0, fixed in 2.22.1; from 2.0.0-rc.0, fixed in 2.20.7.
Fixed in 1.123.43 (released May 13, 2026, 41 days before disclosure), 2.20.7 (released May 13, 2026, 41 days before disclosure) and 2.22.1 (released May 21, 2026, 33 days before disclosure).
The latest release, 2.46.6, is not affected.
53% of n8n downloads last week were affected versions (90.5K).
- CVE-2026-44790Critical 9.4
n8n: Arbitrary File Read via Git Node
Affected: fixed in 1.123.43; from 2.21.0, fixed in 2.22.1; from 2.0.0-rc.0, fixed in 2.20.7.
Fixed in 1.123.43 (released May 13, 2026, 41 days before disclosure), 2.20.7 (released May 13, 2026, 41 days before disclosure) and 2.22.1 (released May 21, 2026, 33 days before disclosure).
The latest release, 2.46.6, is not affected.
53% of n8n downloads last week were affected versions (90.5K).
- CVE-2026-44789Critical 9.4
n8n: HTTP Request Node Pagination Prototype Pollution to RCE
Affected: fixed in 1.123.43; from 2.21.0, fixed in 2.22.1; from 2.0.0-rc.0, fixed in 2.20.7.
Fixed in 1.123.43 (released May 13, 2026, 41 days before disclosure), 2.20.7 (released May 13, 2026, 41 days before disclosure) and 2.22.1 (released May 21, 2026, 33 days before disclosure).
The latest release, 2.46.6, is not affected.
53% of n8n downloads last week were affected versions (90.5K).
- CVE-2026-45732High 8.3
n8n: Cross-user Authorization Bypass in Dynamic Credential OAuth Endpoints
Affected: fixed in 1.123.43; from 2.21.0, fixed in 2.21.1; from 2.0.0-rc.0, fixed in 2.20.7.
Fixed in 1.123.43 (released May 13, 2026, 41 days before disclosure), 2.20.7 (released May 13, 2026, 41 days before disclosure) and 2.21.1 (released May 13, 2026, 41 days before disclosure).
The latest release, 2.46.6, is not affected.
52% of n8n downloads last week were affected versions (88.7K).
- CVE-2026-49444High 7.1
n8n: Python sandbox escape
Affected: fixed in 1.123.48; from 2.22.0, fixed in 2.22.4; from 2.0.0-rc.0, fixed in 2.21.8.
Fixed in 1.123.48 (released May 27, 2026, 27 days before disclosure), 2.21.8 (released May 27, 2026, 27 days before disclosure) and 2.22.4 (released May 27, 2026, 27 days before disclosure).
The latest release, 2.46.6, is not affected.
54% of n8n downloads last week were affected versions (91K).
- CVE-2026-49465Medium 6.0
n8n: Git Node Clone and Push Operations Bypass File Sandbox
Affected: fixed in 1.123.48; from 2.22.0, fixed in 2.22.4; from 2.0.0-rc.0, fixed in 2.21.8.
Fixed in 1.123.48 (released May 27, 2026, 27 days before disclosure), 2.21.8 (released May 27, 2026, 27 days before disclosure) and 2.22.4 (released May 27, 2026, 27 days before disclosure).
The latest release, 2.46.6, is not affected.
54% of n8n downloads last week were affected versions (91K).
- CVE-2026-54304High 7.1
n8n: SecurityScorecard Node Leaks API Token to User-Controlled Host
Affected: fixed in 1.123.55; from 2.26.0, fixed in 2.26.1; from 2.0.0-rc.0, fixed in 2.25.7.
Fixed in 1.123.55 (released Jun 10, 2026, 13 days before disclosure), 2.25.7 (released Jun 10, 2026, 13 days before disclosure) and 2.26.1 (released Jun 9, 2026, 14 days before disclosure).
The latest release, 2.46.6, is not affected.
55% of n8n downloads last week were affected versions (93.2K).
- CVE-2026-54307High 8.5
n8n: Credential Exfiltration via Permission Bypass
Affected: fixed in 1.123.55; from 2.26.0, fixed in 2.26.2; from 2.0.0-rc.0, fixed in 2.25.7.
Fixed in 1.123.55 (released Jun 10, 2026, 13 days before disclosure), 2.25.7 (released Jun 10, 2026, 13 days before disclosure) and 2.26.2 (released Jun 10, 2026, 13 days before disclosure).
The latest release, 2.46.6, is not affected.
55% of n8n downloads last week were affected versions (93.3K).
- CVE-2026-54302High 7.0
n8n: Stored XSS in Chat Trigger Node
Affected: fixed in 1.123.55; from 2.26.0, fixed in 2.26.2; from 2.0.0-rc.0, fixed in 2.25.7.
Fixed in 1.123.55 (released Jun 10, 2026, 13 days before disclosure), 2.25.7 (released Jun 10, 2026, 13 days before disclosure) and 2.26.2 (released Jun 10, 2026, 13 days before disclosure).
The latest release, 2.46.6, is not affected.
55% of n8n downloads last week were affected versions (93.3K).
- CVE-2026-54305High 8.9
n8n: Cross-Tenant Credential Takeover via Dynamic Credentials EE Endpoints
Affected: fixed in 1.123.55; from 2.26.0, fixed in 2.26.2; from 2.0.0-rc.0, fixed in 2.25.7.
Fixed in 1.123.55 (released Jun 10, 2026, 13 days before disclosure), 2.25.7 (released Jun 10, 2026, 13 days before disclosure) and 2.26.2 (released Jun 10, 2026, 13 days before disclosure).
The latest release, 2.46.6, is not affected.
55% of n8n downloads last week were affected versions (93.3K).
- CVE-2026-54301High 7.0
n8n: Same-Origin XSS in Respond to Webhook Node
Affected: fixed in 1.123.55; from 2.26.0, fixed in 2.26.2; from 2.0.0-rc.0, fixed in 2.25.7.
Fixed in 1.123.55 (released Jun 10, 2026, 13 days before disclosure), 2.25.7 (released Jun 10, 2026, 13 days before disclosure) and 2.26.2 (released Jun 10, 2026, 13 days before disclosure).
The latest release, 2.46.6, is not affected.
55% of n8n downloads last week were affected versions (93.3K).
- CVE-2026-54306Medium 6.3
n8n: Prototype Pollution enables confused-deputy execution via public webhooks
Affected: from 2.26.0, fixed in 2.26.2; fixed in 2.25.7.
Fixed in 2.25.7 (released Jun 10, 2026, 13 days before disclosure) and 2.26.2 (released Jun 10, 2026, 13 days before disclosure).
The latest release, 2.46.6, is not affected.
57% of n8n downloads last week were affected versions (96.9K).
- CVE-2026-54308Medium 6.3
n8n: Missing Token Validation on Microsoft Agent 365 Trigger Node
Affected: from 2.26.0, fixed in 2.26.2; fixed in 2.25.7.
Fixed in 2.25.7 (released Jun 10, 2026, 13 days before disclosure) and 2.26.2 (released Jun 10, 2026, 13 days before disclosure).
The latest release, 2.46.6, is not affected.
57% of n8n downloads last week were affected versions (96.9K).
- CVE-2026-54311Medium 6.0
n8n: Merge Node SQL Mode Prototype Pollution
Affected: from 2.26.0, fixed in 2.26.2; fixed in 2.25.7.
Fixed in 2.25.7 (released Jun 10, 2026, 13 days before disclosure) and 2.26.2 (released Jun 10, 2026, 13 days before disclosure).
The latest release, 2.46.6, is not affected.
57% of n8n downloads last week were affected versions (96.9K).
- CVE-2026-54310Medium 6.5
n8n: SQL Injection in Postgres v1/TimesclaeDB Nodes
Affected: from 2.26.0, fixed in 2.26.2; fixed in 2.25.7.
Fixed in 2.25.7 (released Jun 10, 2026, 13 days before disclosure) and 2.26.2 (released Jun 10, 2026, 13 days before disclosure).
The latest release, 2.46.6, is not affected.
57% of n8n downloads last week were affected versions (96.9K).
- CVE-2026-54309High 8.8
n8n: n8n MCP Browser HTTP Transport Exposes Unauthenticated Browser-Control Sessions
Affected: from 2.26.0, fixed in 2.26.2; fixed in 2.25.7.
Fixed in 2.25.7 (released Jun 10, 2026, 13 days before disclosure) and 2.26.2 (released Jun 10, 2026, 13 days before disclosure).
The latest release, 2.46.6, is not affected.
57% of n8n downloads last week were affected versions (96.9K).
- CVE-2026-54314Medium 6.3
n8n: Denial of Service via ZIP decompression in webhook workflow
Affected: fixed in 2.24.0.
Fixed in 2.24.0 (released Jun 2, 2026, 21 days before disclosure).
The latest release, 2.46.6, is not affected.
57% of n8n downloads last week were affected versions (96.4K).
- CVE-2026-54312High 7.2
n8n: Microsoft SQL Node Prototype Pollution
Affected: fixed in 2.24.0.
Fixed in 2.24.0 (released Jun 2, 2026, 21 days before disclosure).
The latest release, 2.46.6, is not affected.
57% of n8n downloads last week were affected versions (96.4K).
- CVE-2026-54303Medium 6.8
n8n: Reflected XSS via Facebook, WhatsApp, and Microsoft Teams Trigger Webhook Verification Endpoints
Affected: fixed in 2.24.0.
Fixed in 2.24.0 (released Jun 2, 2026, 21 days before disclosure).
The latest release, 2.46.6, is not affected.
57% of n8n downloads last week were affected versions (96.4K).
- CVE-2026-54313Medium 6.5
n8n: NoSQL Injection in MongoDB Node Find And Replace Operation
Affected: fixed in 2.24.0.
Fixed in 2.24.0 (released Jun 2, 2026, 21 days before disclosure).
The latest release, 2.46.6, is not affected.
57% of n8n downloads last week were affected versions (96.4K).
- CVE-2026-56357Medium 6.3
n8n - Webhook Forgery via Missing HMAC-SHA256 Signature Verification in GitHub Webhook Trigger
Affected: fixed in 1.123.15; from 2.0.0, fixed in 2.5.0.
Fixed in 1.123.15 (released Jan 15, 2026, 158 days before disclosure) and 2.5.0 (released Jan 20, 2026, 153 days before disclosure).
The latest release, 2.46.6, is not affected.
47% of n8n downloads last week were affected versions (79.1K).
- CVE-2026-56348Medium 5.3
n8n - Credential Exfiltration via Allowed HTTP Request Domains Bypass in Dynamic Node Parameters Endpoint
Affected: fixed in 2.20.0.
Fixed in 2.20.0 (released May 5, 2026, 48 days before disclosure).
The latest release, 2.46.6, is not affected.
54% of n8n downloads last week were affected versions (92.5K).
- CVE-2026-42237Medium 5.3
n8n: SQL Injection in Snowflake and MySQL Nodes
Affected: fixed in 1.123.32; from 2.18.0, fixed in 2.18.1; from 2.0.0, fixed in 2.17.4.
Fixed in 1.123.32 (released Apr 22, 2026, 12 days before disclosure), 2.17.4 (released Apr 22, 2026, 12 days before disclosure) and 2.18.1 (released Apr 22, 2026, 12 days before disclosure).
The latest release, 2.46.6, is not affected.
51% of n8n downloads last week were affected versions (86.6K).
- CVE-2026-42236High 8.7
n8n: Unauthenticated Denial of Service via MCP Client Registration
Affected: fixed in 1.123.32; from 2.18.0, fixed in 2.18.1; from 2.0.0, fixed in 2.17.4.
Fixed in 1.123.32 (released Apr 22, 2026, 12 days before disclosure), 2.17.4 (released Apr 22, 2026, 12 days before disclosure) and 2.18.1 (released Apr 22, 2026, 12 days before disclosure).
The latest release, 2.46.6, is not affected.
51% of n8n downloads last week were affected versions (86.6K).
- CVE-2026-42235High 8.8
n8n: XSS via MCP OAuth client
Affected: fixed in 1.123.32; from 2.18.0, fixed in 2.18.1; from 2.17.0, fixed in 2.17.4.
Fixed in 1.123.32 (released Apr 22, 2026, 12 days before disclosure), 2.17.4 (released Apr 22, 2026, 12 days before disclosure) and 2.18.1 (released Apr 22, 2026, 12 days before disclosure).
The latest release, 2.46.6, is not affected.
45% of n8n downloads last week were affected versions (76.4K).
- CVE-2026-42234High 7.1
n8n: Python Task Runner Sandbox Escape
Affected: fixed in 1.123.32; from 2.18.0, fixed in 2.18.1; from 2.17.0, fixed in 2.17.4.
Fixed in 1.123.32 (released Apr 22, 2026, 12 days before disclosure), 2.17.4 (released Apr 22, 2026, 12 days before disclosure) and 2.18.1 (released Apr 22, 2026, 12 days before disclosure).
The latest release, 2.46.6, is not affected.
45% of n8n downloads last week were affected versions (76.4K).
- CVE-2026-42233Medium 5.3
n8n: SQL Injection in Oracle Database Node via Limit Field
Affected: fixed in 1.123.32; from 2.18.0, fixed in 2.18.1; from 2.0.0, fixed in 2.17.4.
Fixed in 1.123.32 (released Apr 22, 2026, 12 days before disclosure), 2.17.4 (released Apr 22, 2026, 12 days before disclosure) and 2.18.1 (released Apr 22, 2026, 12 days before disclosure).
The latest release, 2.46.6, is not affected.
51% of n8n downloads last week were affected versions (86.6K).
- CVE-2026-42232Critical 9.4
n8n: XML Node Prototype Pollution to RCE
Affected: from 2.18.0, fixed in 2.18.1; from 2.17.0, fixed in 2.17.4; fixed in 1.123.32.
Fixed in 1.123.32 (released Apr 22, 2026, 12 days before disclosure), 2.17.4 (released Apr 22, 2026, 12 days before disclosure) and 2.18.1 (released Apr 22, 2026, 12 days before disclosure).
The latest release, 2.46.6, is not affected.
45% of n8n downloads last week were affected versions (76.4K).
- CVE-2026-42231Critical 9.4
n8n: Prototype Pollution in XML Webhook Body Parser Leads to RCE
Affected: fixed in 1.123.32; from 2.18.0, fixed in 2.18.1; from 2.17.0, fixed in 2.17.4.
Fixed in 1.123.32 (released Apr 22, 2026, 12 days before disclosure), 2.17.4 (released Apr 22, 2026, 12 days before disclosure) and 2.18.1 (released Apr 22, 2026, 12 days before disclosure).
The latest release, 2.46.6, is not affected.
45% of n8n downloads last week were affected versions (76.4K).
- CVE-2026-42230Medium 5.1
n8n: Open Redirect in MCP OAuth Consent Flow
Affected: fixed in 1.123.32; from 2.18.0, fixed in 2.18.1; from 2.0.0, fixed in 2.17.4.
Fixed in 1.123.32 (released Apr 22, 2026, 12 days before disclosure), 2.17.4 (released Apr 22, 2026, 12 days before disclosure) and 2.18.1 (released Apr 22, 2026, 12 days before disclosure).
The latest release, 2.46.6, is not affected.
51% of n8n downloads last week were affected versions (86.6K).
- CVE-2026-42229Medium 5.3
n8n: SQL Injection in SeaTable Node
Affected: fixed in 1.123.32; from 2.18.0, fixed in 2.18.1; from 2.0.0, fixed in 2.17.4.
Fixed in 1.123.32 (released Apr 22, 2026, 12 days before disclosure), 2.17.4 (released Apr 22, 2026, 12 days before disclosure) and 2.18.1 (released Apr 22, 2026, 12 days before disclosure).
The latest release, 2.46.6, is not affected.
51% of n8n downloads last week were affected versions (86.6K).
- CVE-2026-42228Medium 6.3
n8n: Hijacking of Unauthenticated Chat Execution
Affected: fixed in 1.123.32; from 2.18.0, fixed in 2.18.1; from 2.0.0, fixed in 2.17.4.
Fixed in 1.123.32 (released Apr 22, 2026, 12 days before disclosure), 2.17.4 (released Apr 22, 2026, 12 days before disclosure) and 2.18.1 (released Apr 22, 2026, 12 days before disclosure).
The latest release, 2.46.6, is not affected.
51% of n8n downloads last week were affected versions (86.6K).
- CVE-2026-42227Medium 6.0
n8n: Public API Variables IDOR Allows Cross-Project Secret Disclosure
Affected: fixed in 1.123.32; from 2.18.0, fixed in 2.18.1; from 2.0.0, fixed in 2.17.4.
Fixed in 1.123.32 (released Apr 22, 2026, 12 days before disclosure), 2.17.4 (released Apr 22, 2026, 12 days before disclosure) and 2.18.1 (released Apr 22, 2026, 12 days before disclosure).
The latest release, 2.46.6, is not affected.
51% of n8n downloads last week were affected versions (86.6K).
- CVE-2026-42226High 7.1
n8n: Credential Authorization Bypass in dynamic-node-parameters Allows Foreign API Key Replay
Affected: from 2.17.0, fixed in 2.17.5; fixed in 1.123.33.
Fixed in 1.123.33 (released Apr 22, 2026, 12 days before disclosure) and 2.17.5 (released Apr 22, 2026, 12 days before disclosure).
The latest release, 2.46.6, is not affected.
45% of n8n downloads last week were affected versions (76.4K).
- CVE-2026-33751Medium 6.3
n8n Vulnerable to LDAP Filter Injection in LDAP Node
Affected: fixed in 1.123.27; from 2.14.0, fixed in 2.14.1; from 2.0.0-rc.0, fixed in 2.13.3.
Fixed in 1.123.27 (released Mar 25, 2026, the day of disclosure), 2.13.3 (released Mar 25, 2026, the day of disclosure) and 2.14.1 (released Mar 25, 2026, the day of disclosure).
The latest release, 2.46.6, is not affected.
50% of n8n downloads last week were affected versions (84.7K).
- CVE-2026-33749Medium 6.3
n8n Vulnerable to XSS via Binary Data Inline HTML Rendering
Affected: fixed in 1.123.27; from 2.14.0, fixed in 2.14.1; from 2.0.0-rc.0, fixed in 2.13.3.
Fixed in 1.123.27 (released Mar 25, 2026, the day of disclosure), 2.13.3 (released Mar 25, 2026, the day of disclosure) and 2.14.1 (released Mar 25, 2026, the day of disclosure).
The latest release, 2.46.6, is not affected.
50% of n8n downloads last week were affected versions (84.7K).
- CVE-2026-33724Medium 6.3
n8n's Source Control SSH Configuration Uses StrictHostKeyChecking=no
Affected: fixed in 2.5.0.
Fixed in 2.5.0 (released Jan 20, 2026, 64 days before disclosure).
The latest release, 2.46.6, is not affected.
50% of n8n downloads last week were affected versions (85.3K).
- CVE-2026-33722High 7.3
n8n Has External Secrets Authorization Bypass in Credential Saving
Affected: fixed in 1.123.23; from 2.0.0-rc.0, fixed in 2.6.4.
Fixed in 1.123.23 (released Feb 26, 2026, 27 days before disclosure) and 2.6.4 (released Feb 6, 2026, 47 days before disclosure).
The latest release, 2.46.6, is not affected.
47% of n8n downloads last week were affected versions (80.3K).
- CVE-2026-33720Medium 6.3
n8n Has Authorization Bypass in OAuth Callback via N8N_SKIP_AUTH_ON_OAUTH_CALLBACK
Affected: fixed in 2.8.0.
Fixed in 2.8.0 (released Feb 10, 2026, 43 days before disclosure).
The latest release, 2.46.6, is not affected.
51% of n8n downloads last week were affected versions (86.5K).
- CVE-2026-33713High 8.7
n8n Vulnerable to SQL Injection in Data Table Node via orderByColumn Expression
Affected: fixed in 1.123.26; from 2.14.0, fixed in 2.14.1; from 2.0.0-rc.0, fixed in 2.13.3.
Fixed in 1.123.26 (released Mar 19, 2026, 6 days before disclosure), 2.13.3 (released Mar 25, 2026, the day of disclosure) and 2.14.1 (released Mar 25, 2026, the day of disclosure).
The latest release, 2.46.6, is not affected.
50% of n8n downloads last week were affected versions (84.7K).
- CVE-2026-33696Critical 9.4
n8n Vulnerable to Prototype Pollution in XML & GSuiteAdmin node parameters lead to RCE
Affected: from 2.14.0, fixed in 2.14.1; from 2.0.0-rc.0, fixed in 2.13.3; fixed in 1.123.27.
Fixed in 1.123.27 (released Mar 25, 2026, the day of disclosure), 2.13.3 (released Mar 25, 2026, the day of disclosure) and 2.14.1 (released Mar 25, 2026, the day of disclosure).
The latest release, 2.46.6, is not affected.
50% of n8n downloads last week were affected versions (84.7K).
- CVE-2026-33665High 8.8
n8n: LDAP Email-Based Account Linking Allows Privilege Escalation and Account Takeover
Affected: from 2.0.0-rc.0, fixed in 2.4.0; fixed in 1.121.0.
Fixed in 1.121.0 (released Nov 18, 2025, 127 days before disclosure) and 2.4.0 (released Jan 12, 2026, 72 days before disclosure).
The latest release, 2.46.6, is not affected.
45% of n8n downloads last week were affected versions (75.7K).
- CVE-2026-33663High 8.5
n8n Vulnerable to Credential Theft via Name-Based Resolution and Permission Checker Bypass in Community Edition
Affected: fixed in 1.123.27; from 2.14.0, fixed in 2.14.1; from 2.0.0-rc.0, fixed in 2.13.3.
Fixed in 1.123.27 (released Mar 25, 2026, the day of disclosure), 2.13.3 (released Mar 25, 2026, the day of disclosure) and 2.14.1 (released Mar 25, 2026, the day of disclosure).
The latest release, 2.46.6, is not affected.
50% of n8n downloads last week were affected versions (84.7K).
- CVE-2026-33660Critical 9.4
n8n Has Multiple Remote Code Execution Vulnerabilities in Merge Node AlaSQL SQL Mode
Affected: from 2.14.0, fixed in 2.14.1; from 2.0.0-rc.0, fixed in 2.13.3; fixed in 1.123.27.
Fixed in 1.123.27 (released Mar 25, 2026, the day of disclosure), 2.13.3 (released Mar 25, 2026, the day of disclosure) and 2.14.1 (released Mar 25, 2026, the day of disclosure).
The latest release, 2.46.6, is not affected.
50% of n8n downloads last week were affected versions (84.7K).
- CVE-2026-27496High 7.1
n8n has In-Process Memory Disclosure in its Task Runner
Affected: fixed in 1.123.22; from 2.10.0, fixed in 2.10.1; from 2.0.0-rc.0, fixed in 2.9.3.
Fixed in 1.123.22 (released Feb 25, 2026, 28 days before disclosure), 2.9.3 (released Feb 25, 2026, 28 days before disclosure) and 2.10.1 (released Feb 25, 2026, 28 days before disclosure).
The latest release, 2.46.6, is not affected.
49% of n8n downloads last week were affected versions (82.9K).
- CVE-2026-27498Critical 9.0
n8n has Arbitrary Command Execution via File Write and Git Operations
Affected: fixed in 1.123.8; from 2.0.0, fixed in 2.2.0.
Fixed in 1.123.8 (released Dec 22, 2025, 65 days before disclosure) and 2.2.0 (released Dec 22, 2025, 65 days before disclosure).
The latest release, 2.46.6, is not affected.
44% of n8n downloads last week were affected versions (75K).
- CVE-2026-27578High 8.5
n8n Vulnerable to Stored XSS via Various Nodes
Affected: fixed in 1.123.22; from 2.0.0, fixed in 2.9.3; from 2.10.0, fixed in 2.10.1.
Fixed in 1.123.22 (released Feb 25, 2026, the day of disclosure), 2.9.3 (released Feb 25, 2026, the day of disclosure) and 2.10.1 (released Feb 25, 2026, the day of disclosure).
The latest release, 2.46.6, is not affected.
49% of n8n downloads last week were affected versions (82.8K).
- CVE-2026-27577Critical 9.4
n8n: Expression Sandbox Escape Leads to RCE
Affected: fixed in 1.123.22; from 2.0.0, fixed in 2.9.3; from 2.10.0, fixed in 2.10.1.
Fixed in 1.123.22 (released Feb 25, 2026, the day of disclosure), 2.9.3 (released Feb 25, 2026, the day of disclosure) and 2.10.1 (released Feb 25, 2026, the day of disclosure).
The latest release, 2.46.6, is not affected.
49% of n8n downloads last week were affected versions (82.8K).
- CVE-2026-27497Critical 9.4
n8n has Potential Remote Code Execution via Merge Node
Affected: fixed in 1.123.22; from 2.0.0, fixed in 2.9.3; from 2.10.0, fixed in 2.10.1.
Fixed in 1.123.22 (released Feb 25, 2026, the day of disclosure), 2.9.3 (released Feb 25, 2026, the day of disclosure) and 2.10.1 (released Feb 25, 2026, the day of disclosure).
The latest release, 2.46.6, is not affected.
49% of n8n downloads last week were affected versions (82.8K).
- CVE-2026-27495Critical 9.4
n8n has a Sandbox Escape in its JavaScript Task Runner
Affected: fixed in 1.123.22; from 2.0.0, fixed in 2.9.3; from 2.10.0, fixed in 2.10.1.
Fixed in 1.123.22 (released Feb 25, 2026, the day of disclosure), 2.9.3 (released Feb 25, 2026, the day of disclosure) and 2.10.1 (released Feb 25, 2026, the day of disclosure).
The latest release, 2.46.6, is not affected.
49% of n8n downloads last week were affected versions (82.8K).
- CVE-2026-27494High 7.1
n8n has Arbitrary File Read via Python Code Node Sandbox Escape
Affected: fixed in 1.123.22; from 2.0.0, fixed in 2.9.3; from 2.10.0, fixed in 2.10.1.
Fixed in 1.123.22 (released Feb 25, 2026, the day of disclosure), 2.9.3 (released Feb 25, 2026, the day of disclosure) and 2.10.1 (released Feb 25, 2026, the day of disclosure).
The latest release, 2.46.6, is not affected.
49% of n8n downloads last week were affected versions (82.8K).
- CVE-2026-27493Critical 9.5
n8n has Unauthenticated Expression Evaluation via Form Node
Affected: fixed in 1.123.22; from 2.0.0, fixed in 2.9.3; from 2.10.0, fixed in 2.10.1.
Fixed in 1.123.22 (released Feb 25, 2026, the day of disclosure), 2.9.3 (released Feb 25, 2026, the day of disclosure) and 2.10.1 (released Feb 25, 2026, the day of disclosure).
The latest release, 2.46.6, is not affected.
49% of n8n downloads last week were affected versions (82.8K).
- CVE-2026-25631Medium 5.3
Domain allowlist bypass enables credential exfiltration
Affected: fixed in 1.121.0.
Fixed in 1.121.0 (released Nov 18, 2025, 80 days before disclosure).
The latest release, 2.46.6, is not affected.
42% of n8n downloads last week were affected versions (72.1K).
- CVE-2026-21893Critical 9.4
n8n Vulnerable to Command Injection in Community Package Installation
Affected: from 0.187.0, fixed in 1.120.3.
Fixed in 1.120.3 (released Nov 14, 2025, 82 days before disclosure).
The latest release, 2.46.6, is not affected.
32% of n8n downloads last week were affected versions (54.2K).
- CVE-2026-25115Critical 9.4
n8n is vulnerable to Python sandbox escape
Affected: fixed in 2.4.8.
Fixed in 2.4.8 (released Jan 29, 2026, 6 days before disclosure).
The latest release, 2.46.6, is not affected.
50% of n8n downloads last week were affected versions (85.2K).
- CVE-2026-25056Critical 9.4
n8n Arbitrary File Write leading to RCE in n8n Merge Node
Affected: fixed in 1.118.0; from 2.0.0, fixed in 2.4.0.
Fixed in 1.118.0 (released Oct 27, 2025, 100 days before disclosure) and 2.4.0 (released Jan 12, 2026, 23 days before disclosure).
The latest release, 2.46.6, is not affected.
44% of n8n downloads last week were affected versions (74.1K).
- CVE-2026-25055High 7.1
n8n Arbitrary File Write on Remote Systems via SSH Node
Affected: from 2.0.0, fixed in 2.4.0; fixed in 1.123.12.
Fixed in 1.123.12 (released Jan 13, 2026, 22 days before disclosure) and 2.4.0 (released Jan 12, 2026, 23 days before disclosure).
The latest release, 2.46.6, is not affected.
46% of n8n downloads last week were affected versions (78.1K).
- CVE-2026-25054High 8.5
n8n is Vulnerable to Stored Cross-Site Scripting via Markdown Rendering in Workflow UI
Affected: from 2.0.0, fixed in 2.2.1; fixed in 1.123.9.
Fixed in 1.123.9 (released Dec 23, 2025, 43 days before disclosure) and 2.2.1 (released Dec 23, 2025, 43 days before disclosure).
The latest release, 2.46.6, is not affected.
44% of n8n downloads last week were affected versions (75.2K).
- CVE-2026-25053Critical 9.4
n8n is Vulnerable to OS Command Injection in Git Node
Affected: from 2.0.0, fixed in 2.5.0; fixed in 1.123.10.
Fixed in 1.123.10 (released Jan 2, 2026, 33 days before disclosure) and 2.5.0 (released Jan 20, 2026, 15 days before disclosure).
The latest release, 2.46.6, is not affected.
46% of n8n downloads last week were affected versions (78.8K).
- CVE-2026-25052Critical 9.4
n8n Improper File Access Controls Allow Arbitrary File Read by Authenticated Users
Affected: from 2.0.0, fixed in 2.5.0; fixed in 1.123.18.
Fixed in 1.123.18 (released Jan 29, 2026, 6 days before disclosure) and 2.5.0 (released Jan 20, 2026, 15 days before disclosure).
The latest release, 2.46.6, is not affected.
47% of n8n downloads last week were affected versions (79.4K).
- CVE-2026-25051High 8.5
n8n Improper CSP Enforcement in Webhook Responses May Allow Stored XSS
Affected: from 1.123.0, fixed in 1.123.2; fixed in 1.122.5.
Fixed in 1.122.5 (released Dec 4, 2025, 62 days before disclosure) and 1.123.2 (released Dec 4, 2025, 62 days before disclosure).
The latest release, 2.46.6, is not affected.
43% of n8n downloads last week were affected versions (73.4K).
- CVE-2025-61917High 7.7
n8n Unsafe Buffer Allocation Allows In-Process Memory Disclosure in Task Runner
Affected: from 1.65.0, fixed in 1.114.3.
Fixed in 1.114.3 (released Oct 6, 2025, 121 days before disclosure).
The latest release, 2.46.6, is not affected.
13% of n8n downloads last week were affected versions (21.5K).
- CVE-2026-25049Critical 9.4
n8n Has an Expression Escape Vulnerability Leading to RCE
Affected: fixed in 1.123.17; from 2.0.0, fixed in 2.5.2.
Fixed in 1.123.17 (released Jan 23, 2026, 12 days before disclosure) and 2.5.2 (released Jan 23, 2026, 12 days before disclosure).
The latest release, 2.46.6, is not affected.
47% of n8n downloads last week were affected versions (79.5K).
- CVE-2026-1470Critical 9.9
Authenticated users can bypass the Expression sandbox mechanism to achieve full remote code execution on n8n’s main node.
Affected: fixed in 1.123.17; from 2.0.0, fixed in 2.4.5; from 2.5.0, fixed in 2.5.1; fixed in 1.123.17; from 2.0.0, fixed in 2.4.5; from 2.5.0, fixed in 2.5.1.
Fixed in 1.123.17 (released Jan 23, 2026, 4 days before disclosure), 2.4.5 (released Jan 22, 2026, 5 days before disclosure) and 2.5.1 (released Jan 22, 2026, 5 days before disclosure).
The latest release, 2.46.6, is not affected.
46% of n8n downloads last week were affected versions (79K).
- CVE-2026-0863High 8.5
Sandbox escape in n8n Python task runner allows for arbitrary code execution on the underlying host.
Affected: from 2.4.0, fixed in 2.4.2; fixed in 1.123.14; from 2.0.0, fixed in 2.3.5.
Fixed in 1.123.14 (released Jan 14, 2026, 4 days before disclosure), 2.3.5 (released Jan 14, 2026, 4 days before disclosure) and 2.4.2 (released Jan 14, 2026, 4 days before disclosure).
The latest release, 2.46.6, is not affected.
46% of n8n downloads last week were affected versions (78.2K).
- CVE-2025-68949Medium 5.3
n8n has a Webhook Node IP Whitelist Bypass via Partial String Matching
Affected: from 1.36.0, fixed in 2.2.0.
Fixed in 2.2.0 (released Dec 22, 2025, 22 days before disclosure).
The latest release, 2.46.6, is not affected.
31% of n8n downloads last week were affected versions (52.8K).
- CVE-2026-21894Medium 6.5
n8n's Missing Stripe-Signature Verification Allows Unauthenticated Forged Webhooks
Affected: from 0.150.0, fixed in 2.2.2.
Fixed in 2.2.2 (released Jan 2, 2026, 6 days before disclosure).
The latest release, 2.46.6, is not affected.
40% of n8n downloads last week were affected versions (67.8K).
- CVE-2026-21877Critical 10.0
n8n is vulnerable to Remote Code Execution via Arbitrary File Write
Affected: from 0.123.0, fixed in 1.121.3.
Fixed in 1.121.3 (released Nov 26, 2025, 43 days before disclosure).
The latest release, 2.46.6, is not affected.
36% of n8n downloads last week were affected versions (61.7K).
- CVE-2026-21858Critical 10.0
n8n Vulnerable to Unauthenticated File Access via Improper Webhook Request Handling
Affected: from 1.65.0, fixed in 1.121.0.
Fixed in 1.121.0 (released Nov 18, 2025, 50 days before disclosure).
The latest release, 2.46.6, is not affected.
21% of n8n downloads last week were affected versions (36.3K).
- CVE-2025-68697High 7.1
Self-hosted n8n has Legacy Code node that enables arbitrary file read/write
Affected: from 1.2.1, fixed in 2.0.0.
Fixed in 2.0.0 (released Dec 8, 2025, 18 days before disclosure).
The latest release, 2.46.6, is not affected.
33% of n8n downloads last week were affected versions (56.9K).
- CVE-2025-68668Critical 9.9
n8n Vulnerable to Arbitrary Command Execution in Pyodide based Python Code Node
Affected: from 1.0.0, fixed in 2.0.0.
Fixed in 2.0.0 (released Dec 8, 2025, 18 days before disclosure).
The latest release, 2.46.6, is not affected.
34% of n8n downloads last week were affected versions (57.7K).
- CVE-2025-61914High 7.3
n8n's Possible Stored XSS in "Respond to Webhook" Node May Execute Outside iframe Sandbox
Affected: fixed in 1.114.0.
Fixed in 1.114.0 (released Sep 29, 2025, 88 days before disclosure).
The latest release, 2.46.6, is not affected.
34% of n8n downloads last week were affected versions (57.1K).
- CVE-2025-68613Critical 10.0 · KEV
n8n Vulnerable to Remote Code Execution via Expression Injection
Affected: from 0.211.0, fixed in 1.120.4; from 1.121.0, fixed in 1.121.1.
Fixed in 1.120.4 (released Nov 19, 2025, 30 days before disclosure) and 1.121.1 (released Nov 19, 2025, 30 days before disclosure).
The latest release, 2.46.6, is not affected.
31% of n8n downloads last week were affected versions (52.1K).
- CVE-2025-65964Critical 9.4
n8n Vulnerable to Remote Code Execution via Git Node Custom Pre-Commit Hook
Affected: from 0.123.1, fixed in 1.119.2.
Fixed in 1.119.2 (released Nov 14, 2025, 24 days before disclosure).
The latest release, 2.46.6, is not affected.
36% of n8n downloads last week were affected versions (60.5K).
- CVE-2025-62726High 8.8
n8n Vulnerable to Remote Code Execution via Git Node Pre-Commit Hook
Affected: fixed in 1.113.0.
Fixed in 1.113.0 (released Sep 22, 2025, 38 days before disclosure).
The latest release, 2.46.6, is not affected.
33% of n8n downloads last week were affected versions (56.5K).
- CVE-2025-58177Medium 5.4
n8n stored cross-site scripting in LangChain Chat Trigger node initialMessages parameter
Affected: from 1.24.0, fixed in 1.107.0.
Fixed in 1.107.0.
The latest release, 2.46.6, is not affected.
15% of n8n downloads last week were affected versions (26K).
- CVE-2025-57749Medium 6.5
n8n has a symlink traversal vulnerability in "Read/Write File" node allows access to restricted files
Affected: fixed in 1.106.0.
Fixed in 1.106.0.
The latest release, 2.46.6, is not affected.
31% of n8n downloads last week were affected versions (53K).
- CVE-2025-52478High 8.7
Stored XSS in n8n Form Trigger allows Account Takeover via injected iframe and video/source
Affected: from 1.77.0, fixed in 1.98.2.
Fixed in 1.98.2.
The latest release, 2.46.6, is not affected.
5.8% of n8n downloads last week were affected versions (9.9K).
- CVE-2025-52554Medium 4.9
n8n Improper Authorization in Workflow Execution Stop Endpoint Allows Terminating Other Users’ Workflows
Affected: fixed in 1.99.1.
Fixed in 1.99.1.
The latest release, 2.46.6, is not affected.
30% of n8n downloads last week were affected versions (50.2K).
- CVE-2025-49595Medium 4.9
n8n Vulnerable to Denial of Service via Malformed Binary Data Requests
Affected: fixed in 1.99.0.
Fixed in 1.99.0.
The latest release, 2.46.6, is not affected.
30% of n8n downloads last week were affected versions (50.1K).
- CVE-2025-49592Medium 4.6
n8n Login Flow has Open Redirect Vulnerability
Affected: fixed in 1.98.0.
Fixed in 1.98.0.
The latest release, 2.46.6, is not affected.
29% of n8n downloads last week were affected versions (49.5K).
- CVE-2025-46343Medium 5.0
n8n Vulnerable to Stored XSS through Attachments View Endpoint
Affected: fixed in 1.90.0.
Fixed in 1.90.0.
The latest release, 2.46.6, is not affected.
26% of n8n downloads last week were affected versions (44K).
- CVE-2023-27564High 7.5
The n8n package 0.218.0 for Node.js allows Information Disclosure.
Affected: fixed in 0.216.1.
Fixed in 0.216.1.
The latest release, 2.46.6, is not affected.
12% of n8n downloads last week were affected versions (20.9K).
- CVE-2023-27563High 8.8
The n8n package 0.218.0 for Node.js allows Escalation of Privileges.
Affected: fixed in 0.216.1.
Fixed in 0.216.1.
The latest release, 2.46.6, is not affected.
12% of n8n downloads last week were affected versions (20.9K).
- CVE-2023-27562Medium 6.5
The n8n package 0.218.0 for Node.js allows Directory Traversal.
Affected: fixed in 0.216.1.
Fixed in 0.216.1.
The latest release, 2.46.6, is not affected.
12% of n8n downloads last week were affected versions (20.9K).